It’s time to revise corporate crisis management. 
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The Bestof 
Both Shores 


ALLSTATE, AVON AND GXS are among several 
Fortune 500 companies that are slashing 
labor costs while retaining control over IT 
staffs and project quality through offshore 
insourcing. Tasos TSolakis at GXS (above) 
estimates that he has saved $16 million a year 
under this emerging model 
by shifting work to offshore 
employees. PAGE 37 
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Future Watch: Data integration through the Semantic Web. 
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Users Back Novell Plan for 
NetWare-to-Linux Path 


NetWare 7 release will put services on both OS 
kernels as means of providing migration option | 





BY DON TENNANT | Ware 7 is due to succeed Net- 
ge al | Ware 6.5, which entered pub- 
With the announcement last lic beta- testing last week. 

week that Novell Inc. has We are not dropping Net- 


| tapped Linux as the migration | Ware; we are adding Linux,” 
path for NetWare, ___—_ said Jack Messman, 


Novell’s chairman 
and CEO, ina 
keynote speech to 
BrainShare atten- 
dees. “This is not a 
departure from Net- 
Ware. We will not 
abandon you, and you need 
not abandon us.” 

That’s just what many Net- 
Ware users wanted to hear. 

“The way they’re migrating 
the operating system — going 


users said they fi- 
nally have reason 
to believe that the 
folks in Novell’s 
executive suite are 
as Savvy as its engi- 


ONE ON ONE 


Now NetWare users know 
they won't “get stuck,” 
CEO Jack Messman says: 


© QuickLink 37798 
computerworld.com 


At its BrainShare 2003 user 
and partner conference here, 
Novell announced that Net- | 

| 
| 
| 
| 
| 
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sitting on top of both the Net- 
Ware and Linux kernels. Net- 


IT ee rs Ready to Start 
i 


irtualization Push 
Savings eyed as top 
vendors begin to offer 


BY LUCAS MEARIAN 
PHOENIX 


ty, Says editor in chief Maryfran 
Johnson. Page 20 
to upper management because 
of its potential to create a more 
automated way of provision- 
ing storage on the company’s 
| 160TB storage-area network. 
| Neal added that she’s partic- 
| ularly interested in network- 
based virtualization technolo- 
gy that could let users reach 
across a myriad of storage de- 
Storage, page 16 


With major vendors starting 


technology, many IT managers 
at last week’s Storage Net- 
working World conference 
here said they’re ready to be- 


of increasing their storage ca- 
pacity utilization rates and au- 
tomating more operations. 
For example, Lynn Neal, a 
senior systems integrator at 
Sprint Corp., said she’s push- 








to a modular format — makes 


a lot of sense,” said Michael 


| Gardner, a senior systems en- 
| gineer at Munder Capital 


Management, a financial ser- 


| vices firm in Bloomfield Hills, 
| Mich. NetWare “has always 
| stood there as one of the more 


NetWare, page 14 


Slow Uptake 
' For Windows 


Server 2003 


| Users see benefits, 


but many have just 


| upgraded to Win 2k 


| BY CAROL SLIWA 


Few corporate IT departments 


| are expected to race to adopt 
| the long-delayed Windows 

| Server 2003 operating system 
| that Microsoft Corp. will 


launch this week. 
Several IT managers con- 


| tacted last week by Computer- 


world said they have no plans 
to migrate to the new operat- 
ing system this year — espe- 
cially those who have recently 
finished or are in the process 
of completing a move to Win- 
dows 2000 Server. 
“We tend to lag behind on 


| upgrades. It allows a shake-in 


period and means less risk,” 
said Bob Farrugia, director of 


| application delivery at London 


Windows, page 49 


—_INTHE SHADOW 
Amid the hoopla, Microsoft is also 
launching Visual Studio Net 2003. 
Page 49 
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Received virus-infected macro 


Recognize any of those issues? Or, perhaps, all of them? 
We thought so. Many of these issues can be related to your 
legacy desktop software; fortunately, many of them can be 
addressed by features in Microsoft® Windows® XP Professional 
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Needs to make a VPN connection 


and Microsoft Office XP Professional. Want specific examples? 


. The Group Policy feature in Windows XP Professional lets _ 
 ©—=syou define related user groups and then easily assign secutity 
| settings to the group as a whole. Office XP Professional — 











their lifetime value and achieve greater competitive 
advantage. To find out how leading companies are 
reaping the rewards of SAS customer intelligence 
software, call 1 866 270 5723 or visit our Web site. 
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In the Technology section: Wireless LAN devices based on the 
802.llg standard aren’t yet ready for corporate use, but by 
~ late 2003, the technology will be built into most wire- 
“x _ less LAN access points. Users may have to wait a 
™ while longer for real-world benefits. Page 30 
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in the Management section: At Blue 
Cross and Blue Shield of Minnesota, CIO 
John Ounjian (left) is creating business 
value while bringing IT into compliance 
with HIPAA regulations. Page 41 
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Invensys plans io sell Baan. 
Singled out for its weak finan- 
cial performance in February, 
the software vendor finds it- 
self on the block for the sec- 
ond time in three years. 


Lawson Software says that 
despite tough times, it’s still 
committed to enhancing its 
product lines through devel- 
opment or acquisitions. 


Federal IT spending could 
grow from $45 billion this fis- 
cal year to $68 billion in 2008, 
a new study predicts. 


Sun CEO Scott McNealy talks 
about mobility while flying to 
Orlando on his corporate jet. 


Emerging security tools 
promise to give users better 
administration and manage- 
ment capabilities. 


The FBI turns its attention to- 
ward improving data mining 
and information sharing. 


Networking vendors gear up 
for launches of switch-based 
wireless LAN products at the 
upcoming Networld+Interop. 


BMC announces software 
aimed at IT workers who lack 
mainframe skills. 


AMD’s 64-bit Opteron server 


chip is garnering the support 


25 Enterprises Widen the 


Search Net. New enterprise 
search engines scan distrib- 
uted data stores, returning 
only the most relevant results. 


: 32 Q&A: Nothing but ’Net. 


PeopleSoft’s Carol Ptak tells 
how vendors are focusing on 
customers’ needs during these 
tough economic times. 


34 Future Watch: The Web’s Next 


Leap. With the Semantic Web, 
the inventor of the World 
Wide Web hopes to infuse in- 
telligence into his creation. 


: 35 Security Manager’s Journal: 


The Battle Against Pornogra- 
phy Continues. Vince Tues- 
day looks into automated mail 
filtering and is surprised to 
find a tool that can do the job. 
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: 37 The Best of Both Shores. 


Slashing labor costs while re- 
taining control over IT staff 
and project quality are at the 
heart of offshore insourcing. 


> 39 Tight Lips. Companies have 


typically provided as little in- 
formation as possible about 
former employees for fear of 
being sued. But some hiring 
managers are finding ways to 
dig deeper into the back- 
grounds of job candidates. 


20 Maryfran Johnson says that 


last week’s Storage Network- 
ing World conference high- 
lighted to two key trends: 
consolidation of storage 
resources and a move toward 
standardization. 


20 Pimm Fox observes that you 


might get a sense of déja vu 
as you venture into the field 
of Web services, since you 
probably encountered some 
of the challenges — and some 
of the players — in earlier en- 
deavors. 


Ari Kaplan stresses the im- 
portance of having solid con- 
tractual relationships with 
your supply chain partners. 


36 Tommy Peterson says all the 


buzz about real-time applica- 
tions is drowning out impor- 
tant practical censiderations. 
Remember: Real-time access 
to data is just one factor in 
successful decision-making. 


42 Bart Perkins advises that you 


consider the same conse- 
quences for offshore out- 
sourcing that you would 
consider in making any 
outsourcing decision. 


50 Frankly Speaking: Frank 


Hayes urges IT managers to 
build security into their users, 
not just their systems. 
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Sometimes, It’s not Nice to Share 
SECURITY: Simply restricting file sharing and 
eliminating mapped drives can help keep 
“network-aware” worms away from your sys- 
tems, says columnist Douglas Schweitzer. 


© QuickLink 37641 


Speed Performance With 
Asynchronous Database Calls 


DEVELOPMENT: Reduce the time it takes to 
retrieve a recordset from a large database. 


© QuickLink a3040 
How to Plan for a 
System Migrati 


OPERATING SYSTEMS: The first of a three- 
part look on how to plan for a 30,000-seat 
migration. @ QuickLink 37850 


Building Blocks for a 
Mobile/Wireless Strategy 
MOBILE/WIRELESS: XcelleNet CTO Joe 
Owen discusses the steps you need to take to 
devise a successful wireless strategy, focus- 
ing on ownership costs, security and band- 


width issues. @ QuickLink 37830 
Taking a Worldview of Storage 


STORAGE: Pierre Baudet, business systems 
manager at New Balance Athletic Shoe, tells 
SNW Online how much you can learn about 
vendors when developing and installing a 
storage utility backbone. @ QuickLink 37762 


ONLINE 
DEPARTMENTS 


Breaking News 
© QuickLink a1510 


What's a QuickLink? 
On some pages in 
this issue, you'll see 


a QuickLink code pointing 
to additional, related con- 
tent on our Web site. Just 
enter that code into our 
QuickL ink box, which 
you'll see at the top of 
each page on our site. 
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At Deadline Briefs 

News Briefs 

Letters 

Company Index ................. 48 
How to Contact CW 

Shark Tank 


of operating system vendors. eee ener enn ree 
Newsletter Subscriptions 
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Knowledge Centers 

@ QuickLink 22570 
The Online Store 
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: 40 Q&A: Facing the Unthinkable. 

: It’s time for corporate crisis 
management to grow up, says 
Ian I. Mitroff, who wrote about 
that subject in this month’s 
Harvard Business Review. 


Storage Networking World 
attendees say the increased 
use of SAN technologies 
could help them cope with 
diminished IT resources. 
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NEWS 





AT DEADLINE 


Microsoft, U.S. File 
Settlement Report 


Microsoft Corp. and the U.S. gov- 
ernment said in a joint status re- 
port that the company has taken 
a series of steps to comply with 
the antitrust settlement deal ap- 
proved by a federal judge in No- 
vember. The actions include train- 
ing for about 10,000 of Micro- 
soft’s employees and the forma- 
tion of an internal committee to 
manage compliance efforts. 


Dell Retakes PC 
Lead, IDC Says 


Dell Computer Corp. regained the 
lead in worldwide PC shipments 
from Hewlett-Packard Co. in the 
first quarter, capitalizing on a 
shift in buying from consumers 
to corporate users, according to 
IDC. Dell shipped about 6 million 
PCs, compared with 5.5 million 
for HP, IDC said. The Framing- 
ham, Mass.-based market re- 
search firm added that total ship- 
ments increased 2.1% year over 
year to 34.6 million PCs. 


Homeland Agency 
Taps Privacy Chief 
The U.S. Department of Homeland 
Security has named Nuala 0’Con- 
nor Kelly as its first privacy offi- 
cer. O’Connor Kelly, who will 

be responsible for ensuring that 
the technologies used by the 
agency don’t erode the privacy 

of U.S. citizens, previously held a 
similar position at the Department 
of Commerce. 


Short Takes 


President Bush has nominated 
Maj. Gen. Steven Boutelle to 
become the U.S. ARMY'S CIO. 
Boutelle, who would also be pro- 
moted to lieutenant general, cur- 
rently is director of information 
operations, networks and space 
for the Army. . . . Poway, Calif.- 
based GATEWAY INC. reported a 
$197.7 million first-quarter loss 
on revenue of $844.4 million. 


Revenue was down 20% from the | 


year-earlier level of $1.06 billion. 





Struggling Baan Put 


Invensys seeks to 
divest business 
apps vendor 


| 


BY MARC L. SONGINI 
OR the second time in 
three years, business 
applications vendor 
Baan Co. is on the auc- 

tion block, a devel- 

opment that drew 
mixed reactions 
from users and ana- 
lysts last week. 

Parent company Invensys 
PLC announced that it has put 
Baan up for sale as part of a 
plan to jettison two-thirds of 
its assets. Invensys, a London- 
based maker of manufacturing 
control systems and other 
products, bought Baan in Au- 
gust 2000 for $709 million and 
has pumped another $100 mil- 
lion into the Barneveldt, 
Netherlands-based software 
vendor since the acquisition. 

But Invensys has been hit 
by a drop-off in revenue and 
profits, and the company sin- 
gled out Baan as a weak per- 
former during a business up- 
date in February. At the time, 
Invensys said Baan’s financial 
performance in the fiscal year 
that ended March 31 would 
likely be “materially worse” 
than expected, despite efforts 
to cut costs and improve cus- 
tomer service. 

Dave Wangler, senior vice 
president of global marketing 
at Baan, said officials at the 
software vendor are talking 
to several interested buyers 
and are looking to close a deal 
within months. “We’re hoping 
we can make it a quick proc- 
ess, and as far as customers are 
concerned, it’s business as usu- 
al,” Wangler said. 

But Todd Roeller, e-business 
technology manager at Flow- 
serve Corp. in Irving, Texas, 
said the maker of liquid flow- 
control products is in a wait- 
and-see position on Baan. “It’s 





ity 
Sa 


a little disconcerting thinking 
you’re leveraged to a vendor’s 
product that may be in trou- 
ble,” Roeller said. 

Flowserve runs a number of 
Baan applications, including 
one that lets its customers con- 
figure products and get pricing 
data online. The applications 
“need more investment to sat- 
isfy our require- 
ments,” Roeller said. 
“Being on the chop- 
ping block will likely 
delay or eliminate 
the future developments we’re 
counting on.” 

Invensys made a mistake 
by announcing the planned 
sale before it had a buyer lined 
up, because the uncertainty 
could be a cause of concern 
for some users, according to 
John Moore, an analyst at ARC 
Advisory Group Inc. in Ded- 
ham, Mass. “Customers will be 


Up for Sale — Again 


worried, whether or not they 
should be,” he said. 

However, Moore noted that 
Baan currently enjoys the 
highest customer satisfaction 
ratings it has had in years and 
that it has been largely suc- 
cessful in retaining existing 
users. Those factors, along 
with the quality of Baan’s 
product line, should make it 
attractive to potential buyers, 
Moore said. 

“Tf it’s the right buyer, this 
could be a very good thing,” 
said Keith Bearden, CIO 
at dental equipment maker 
A-dec Inc. in Newberg, Ore. 
But he said he would be con- 
cerned if Baan is acquired by a 
venture capital firm that puts 
profits above product quality. 

“I hope that Baan is allowed 
to continue some of the moves 





they have started,” Bearden 
said, adding that the software 
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Baan’s March to 
The Auction Block 


SEPTEMBER 2002: Invensys 
CEO Rick Haythornthwaite says 
his top priority at a Baan user 
conference will be to “assuage 
fears” about the software ven- 
dor's future. 


NOVEMBER 2002: Invensys 
discioses that the financial re- 
sults of Baan and two related 
software businesses were 
down “considerably” in the 
first half of its fiscal year. 


FEBRUARY: The company says 
that Baan’s performance has 
worsened significantly and 
adds that it plans to review the 
value of its investment in the soft- 
ware vendor. 


APRIL: Invensys puts Baan up 
for sale along with a group of 
business units that sell energy 
management products. 


vendor’s focus on customer 
satisfaction and continued de- 
velopment of its next-genera- 
tion Gemini applications are 
“critical to the long-term suc- 
cess of the company.” D 





Lawson Sticks to Product 
Strategy, Despite Losses 


Company plans 
software updates, 


eyes acquisitions 


BY MARC L. SONGINI 
ORLANDO 

Looking to overcome a drop- 
off in revenue that has led to 
three straight quarterly losses, 
Lawson Software Inc. plans to 
continue to make incremental 
additions to its line of busi- 
ness applications. 

Last week, at its annual user 
conference here, Lawson out- 
lined a strategy to enhance ex- 
isting product lines, by both 
acquisition and internal devel- 
opment. “We’re going to be 
around for a long time,” Jay 
Coughlan, Lawson’s president 
and CEO, told attendees. 

In addition to announcing 
an expected application out- 


sourcing program at the con- 
ference [QuickLink 37685], 

St. Paul, Minn.-based Lawson 
said it’s working with New 
York-based Deloitte & Touche 
LLP to offer a consulting ser- 
vice designed to help CIOs 
analyze the efficiency of their 
IT departments. 

That sort of offering could 
help CIOs talk to CEOs and 
chief financial officers in busi- 
ness terms, said Jeffrey Pullen, 
team leader of financial sys- 
tems at Lafarge North Ameri- 
ca Inc., a maker of construc- 
tion materials in Herndon, Va. 

A half-dozen users, includ- 
ing Pullen, said they’re satis- 
fied with Lawson and its prod- 
uct direction and expect the 
company to remain viable. 





But Larry Kerr, director of 
enterprise resource planning 
| for the city of Greensboro, 


N.C., noted that he encoun- 
tered a series of software bugs 
during an implementation of 
Lawson’s Series 8 human re- 
sources, finance and payroll 
applications. The project be- 
gan last August and was com- 
pleted in January. 

Lawson upgraded some of 
the applications five times to 
fix the bugs, Kerr said, adding 
that the city had to pay addi- 
tional consulting fees because 
of the upgrades. But the appli- 
cations are now stable, he said. 

A Lawson spokesman said 
the company has resolved the 
initial stability problems in 
the Series 8 software, which 
became available in 2001. 
About 40% of Lawson’s in- 
stalled base has migrated to 
the Web-enabled Series 8 
applications, he added. D 


NO NEED TO WORRY 


Lawson's CEO says the company’s financial 
health “is not even an issue.” Read more: 


QuickLink 37828 


www.computerworld.com 
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War, Terrorism Fuel Fed’s IT Budget Growth 


Projected to grow 8.5% a year, IT 
spending could hit $68B in 2008 





BY DAN VERTON 
WASHINGTON 

Stimulated by the war in Iraq, 
increased threats of terrorist 
attacks and the formation 

of the U.S. Department of 
Homeland Security (DHS), 
the federal IT market could 
top $68 billion by 2008, a new 
study predicts. 

While the anticipated recov- 
ery of commercial IT markets 
never quite materialized in 
2002, “the federal government 
remains an attractive market- 
place based on its sheer size 
and consistent spending pat- 
terns,” according to the “Fed- 
eral IT Market Forecast” re- 
leased last week by Chantilly, 
Va.-based Input. “Projected 
increases of 13% in [fiscal] 
2003 spending over [fiscal] 
2002 mean that the govern- 
ment is actually an engine of 
growth,” the report stated. 

Homeland security and 
e-government initiatives re- 
main the highest IT priorities 
for federal agencies, said Pay- 
ton Smith, manager of federal 
market analysis at Input. 
These two areas are driving 
significant near-term increas- 
es in spending, he said. 

According to Input, govern- 
ment spending on IT products 
and services will increase at 
a compound annual growth 
rate of 8.5%, from $45.4 billion 
in fiscal 2003 to $68.2 billion 
in fiscal 2008. 


Big Budget 
Driving much of that estimat- 
ed growth is the recent forma- 
tion of the DHS. The size of 
the DHS IT budget is second 
only to that of the Department 
of Health and Human Services 
among civilian government 
agencies, according to a mar- 
ket forecast by McLean, Va.- 
based Federal Sources Inc. 
For fiscal 2003, the DHS com- 
manded a $3 billion IT budget. 
Federal Sources projects that 
figure will increase to $4 bil- 
lion next year. 

“The DHS is large enough 





and expected to grow fast 
enough to rival the military 
services in terms of IT spend- 
ing” by 2008, according to the 
Input forecast. And if Federal 
Sources’ estimates are accu- 
rate, that would place the DHS 
IT budget above the $6.5 bil- 
lion mark, which is the current 
estimate for U.S. Air Force IT 
spending for fiscal 2004. 

The “DHS is off the charts, 
with an IT [budget] gain of 
$745 million” from fiscal 2003 
to fiscal 2004, said Jim Kane, 
president and CEO of Federal 
Sources. 

Input’s forecast concluded 
that the growth in federal IT 
spending will be greatest for 
outsourcing services, as op- 
posed to spending on hard- 
ware, software and telecom- 


| 


| 





On Board Sun’s Corporate 
Jet, McNealy Talks Mobility 


BY PATRICK THIBODEAU 
Sometimes Scott McNealy 
wishes he didn’t have a corpo- 
rate jet. 

Instead of leaving early from 
San Jose for a five-hour flight 
to Orlando to attend Sun’s 
iForce partner con- 
ference, the CEO of 
Sun Microsystems 
Inc. is getting out of 
his office late. He 
says on the way to the airport 
that had he taken a commerciai 
flight, he would have been 
forced to leave at a more rea- 
sonable hour and wouldn't be 
checking into his hotel at 2 a.m. 

Sun’s revenue is down for 
the quarter that ended March 
30, off 10% from the same pe- 
riod a year earlier. However, 
the company posted a $4 mil- 
lion profit on $2.79 billion in 
sales. Meanwhile, competition 
from Hewlett-Packard Co., 
IBM and Intel Corp.’s 64-bit 
Itanium chip is accelerating. If 
McNealy is bothered by any of 
that, he doesn’t show it as he 





boards his corporate jet. 

His casual style — blue 
jeans and open collar in the 
mold of the Silicon Valley cul- 
ture — belies his intensity. As 
the plane lifts off for Orlando, 
McNealy doesn’t pause for a 

second. He picks up 

his cell phone to 

make a point. 

“This is ultimate- 

ly what we think is 
the big winner in the thin- 
client computing market- 
place,” he says. “It goes with 
you, and it’s always on, and 
you take it everywhere.” 

McNealy built his company, 
founded in 1982, on a philoso- 
phy that the network is the 
computer. He sees ubiquitous 
networked devices, from 


| cell phones to browsers on 


shopping carts connected to 
shopping lists at home, as 
the future. 

McNealy talks animatedly 


about client-side applications, 


such as those being used in 
sales automation, written 


| prise on the strength 





munications. In addition, out- 
sourcing of government IT is 
expected to reach a high of 
nearly 87% in 2008. 

The anticipated retirement 
of a large portion of the feder- 
al IT workforce, the critical 
lack of IT skills and the Bush 
administration’s stated prefer- 
ence to partner with the pri- 
vate sector are all contributing 
factors to the anticipated 
growth in outsourcing, ac- 
cording to the Input study. 

Kane recommended that 
companies take specific mea- 
sures to ensure that they are 
positioned to take advantage 
of the new federal IT market. 

For example, companies 
should map their product and 


| service offerings to agency en- 


terprise architecture plans and 
overall mission statements. In 
addition, business develop- 
ment managers should study 
the government’s use of busi- 


for Java-enabled devices — 
100 million of which he says 
are already in use. 

Sun, he says, is adding 
voice-over-IP technology to 
its Sun Ray thin-client work- 
stations. That means once a 
user logs onto a terminal with 
a Java card, the phone recog- 
nizes that user. This summer, 


| Sun will release a software 


stack running on Linux code- 
named Mad Hatter to boost its 
desktop offerings. 

The total package is a direct 
attack on the desktop PC. 


| Does Sun see itself as an alter- 


native to Microsoft Corp.? 

“It depends on who you 
are,” McNealy says. “For the 
hundreds of thousands of Sun 
Ray users, we already are. For 
those who want their PC, they 
may hope never. 

We don’t build a 

strategy based on 
what our competitors 
are doing,” he says. 
“We build a strategy 
based on what our 
customers want.” 

Microsoft is moving [RIE 
deeper into the enter- 


of its desktop domi- 





Projected 
Federal IT Markets 


Fiscal 2003 to 2008 


@BFY 2003 
mFY 2008 


= SS SS 


NOTE: Dollar amounts are in billions. 


ness-case scoring, which in 
addition to setting certain se- 
curity standards ensures that 
all new IT investments pro- 
vide a return on investment 
that’s equal to or greater than 
alternate uses of the same 
funding. It also requires that 
all such spending goes to 
products and services that 
directly support an agency’s 
mission. D 


| nance, and Sun officials say 
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their client strategy will help 
boost enterprise sales. But 
while company officials claim 
that they can chip away at 
Microsoft, they aren’t making 
any bold predictions or even 
offering safe bets. 

“We’re not trying to beat 
Microsoft; we’re not trying to 
challenge Microsoft,” Mc 
Nealy says. “We're trying to 
solve a problem... and give 
people mobility with security.” 

When the plane lands in 
Orlando, a car to pick up the 
CEO has yet to arrive. Mc- 
Nealy seems almost amused 
by his sudden lack of mobility. 

Meeting with his iForce 
partners the next day, Mc- 
Nealy is as outspoken as ever. 
If he’s tired, he hides it well. 
He touts the compa- 
ny’s $5.3 billion in 
cash reserves. “We're 
doing just fine opera- 
tionally,” he says, un- 
able to refrain from 
taking one more stab 
at Microsoft: After all, 
he says, Sun has a cash 
position above every- 
one who “isn’t a con- 
victed monopolist.” D 
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Microsoft Offers 


Microsoft Corp. reported a $2.79 
billion net profit on revenue of 
$7.84 billion for its third quarter, 
which ended March 31. Revenue 
was up 8% from $7.25 billion a 
year ago. But Microsoft offered a 
cautious outlook, saying there is 
no sign that corporate IT spend- 
ing or overall demand for PCs is 
picking up. Microsoft expects its 
fourth-quarter revenue to be 
similar to the third-quarter total. 


... And Agrees to 
Settle Florida Suits 


Microsoft also said it has agreed 
to pay up to $202 million to set- 
tle class-action lawsuits that ac- 
cused the company of violating 
Florida’s antitrust and unfair- 
competition laws. The money will 
be distributed in the form of 
vouchers that can be used to buy 
desktop or portable PCs running 
any operating system. 


IBM Q1 Earnings Up 
But Below Plan 


IBM fell short of Wall Street 
earnings expectations but still 
reported year-over-year profit 
and revenue growth for the first 
quarter. The company said it had 
net income of $1.38 billion on 
total revenue of $20.07 billion. 
Among other top vendors report- 
ing first-quarter results, SAP AG 
said its profit nearly doubled 
year over year to $201 million, 
despite an 8% drop in revenue. 


Short Takes 


WORLDCOM INC. filed a proposed 
financial reorganization plan 


with the U.S. Bankruptcy Court 


and said it will now use MCI as 
its brand name. . . . IT services 
firm ACCENTURE LTD. said it’s 
cutting about 750 of its 75,000 
employees. . . . SIEBEL SYSTEMS 
INC. announced an upgrade of its 
Universal Application Network 
software, which ties the compa- 
ny’s CRM applications to other 
systems. 





NEWS 


‘Tools Promise 
Better Security 
Management 


New products 
allow centralized 
administration 


BY JAIKUMAR VIJAYAN 
SAN FRANCISCO 
ENTRAL management 
of multivendor secu- 
rity systems and the 
data they generate 
can lead to better risk manage- 
ment and auditing capabilities, 
users said at last week’s RSA 
Conference 2003 here. 

And vendors are lining up to 
tap into that opportunity, with 
new products offering single- 
point administration of activi- 
ties ranging from threat identi- 
fication and mitigation to iden- 
tity management, access con- 
trol and configuration of secu- 
rity systems made up of prod- 
ucts from multiple vendors. 

Conference host RSA Secu- 
rity Inc. rolled out identity 
and access management soft- 
ware called Nexus that’s de- 
signed to allow central admin- 





istration of all of RSA’s securi- 
ty products. With it, users 
will be able to centrally man- 
age user and access policies, 
validate the authenticity of 
digital certificates and enforce 
consistent security policies, 
according to Bedford, Mass.- 
based RSA. 

Such integration would be 
“nirvana,” said Luis Suarez, 
vice president and manager of 
PKI and encryption key man- 
agement at Wachovia Corp. in 
Charlotte, N.C. 

The goal is to make manage- 
ment of disparate technolo- 
gies “more transparent and 
seamless,” said David Young, 
IT program director at 
Geisinger Health System in 
Danville, Pa. “It is something 
we have been trying to get our 
hands around for some time.” 


Competing Moves 
Making a similar announce- 
ment was Computer Associ- 
ates International Inc., which 
said it will launch its eTrust 
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NEW PRODUCTS 


Here’s a sampling of newly available security management products: 


PRODUCT SUPPLIER 


DESCRIPTION 
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= Nexus RSA Security 


= Security 
Information 
Management 


8 Tivoli Risk IBM 
Manager 


NetForensics Inc. 


Allows central management of 
RSA's integrated identity- and 
access-management software. 


Collects and correlates real- 
time security event information 
from firewalls, IDSs, antivirus 
tools and operating systems. 


Provides a central console for 
identifying and managing 
security threats. 





Security Command Center lat- 
er this quarter. The product, 
which is in the final stages of 
beta testing, will give users a 
browser-based interface for 
centrally administering multi- 
vendor security infrastruc- 
tures, according to CA. 

A week earlier, ArcSight 
Inc. in Sunnyvale, Calif., an- 
nounced that it has expanded 
the number of products sup- 
ported by its ArcSight 2.1 risk 
management software. The 
product can now collect, cor- 
relate and centrally report se- 
curity event data from more 
than 60 products, such as fire- 
walls, intrusion- and spam-de- 
tection software and identity 
management tools, company 
officials said. 

Driving the need for such 
tools is the growing complexi- 
ty of managing a robust secu- 


Vendors to Promote Integration of IT, Physical Security 


SAN FRANCISCO 


Computer Associates is leading a 
multivendor initiative to define 
common standards for integrating 
the management of physical and 
IT security systems. 

Under the Open Security Ex- 
change effort, CA will work with 
HID Corp. in Irvine, Calif., Gemplus 
International SA in Luxembourg 
and Tyco Fire & Security in Boca 
Raton, Fla. 

HID manufactures physical ac- 
cess control systems, Gemplus 
makes smart cards, and Tyco is 
an integrator of physical security 
systems. 

The group has already drafted 
initial specifications for common 
administration of users and privi- 
leges, common authentication to 


IT systems and physical facilities, 
and centralized management and 
auditing of both functions. 

Going forward, the Open Secu- 
rity Exchange will make the inter- 
operability specifications available 
to standards bodies for considera- 
tion as open standards, said CA 
Vice President Russell Artzt. 

Integrating physical and IT se- 
Curity can give companies a more 
comprehensive view of risk and 
how to manage it, said Luis 
Suarez, vice president and manag- 
er of PKI and encryption key man- 
agement at Wachovia. The bank is 
piloting a project that will enable 
users to access physical facilities 
and IT networks via smart cards. 

But a lot depends on the extent 
to which additional vendors sup- 


port such efforts, said Adam 
Stanislaus, vice president of physi- 
cal security at First Data Corp. in 
Overland Park, Kan. 

First Data is testing a CA tech- 
nology called eTrust 20/20 to see 
if the product can centrally man- 
age the financial firm's physical 
and IT access control databases. 

For the technology to be really 
useful to First Data worldwide, it 
would need to support many more 
physical access control technolo- 
gies from more vendors, Stanis- 
laus said. 

“We would like to see more 
partners involved. We hope it is an 
open architecture and not just 
[limited to] three or four compa- 
nies,” he said. 

~ Jaikumar Vijayan 








rity infrastructure, said Karl 
Jackson, a systems engineer at 
Brigham Young University in 
Provo, Utah. 

Companies typically have an 
aggregation of firewalls, host- 
and network-based intrusion- 
detection systems (IDS), anti- 
spam and antivirus software, 
and access-control and identi- 
ty-management tools. On top 
of all that is the data; a single 
firewall, for instance, can gen- 
erate more than 1GB per day. 
And IDS sensors can log near- 
ly half a million entries daily. 

“There are so many different 
products and so many differ- 
ent ways of looking at things. 
If I could put everything in one 
place, it’s going to make my 
life so much easier,” said Jack- 
son, who for the past month 
has been beta-testing CA’s 
Command Center — a product 
he’s pleased with. “It’s been 
great,” he said. “It kind of cen- 
tralizes everything, where be- 
fore you would have to run all 
sorts of different applications.” 

Tools with the ability to 
gather and quickly correlate 
information from multiple de- 
vices allow companies to pri- 
oritize and manage security in- 
cidents from a single console, 
said Michael Rasmussen, an 
analyst at Forrester Research 
Inc. in Cambridge, Mass. 

They also provide the abili- 
ty to comply with regulations 
such as the Health Insurance 


Portability and Accountability 
Act, Rasmussen said. B 
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FBI Begins Knowledge 
Management Face-li 


With Phase | of Trilogy network done, 
bureau tackles data mining, info sharing 





BY DAN VERTON 
WASHINGTON 
HE FBI last week be- 
gan focusing its at- 
tention — as well as 
tens of millions of 
doliars from its fiscal 2004 
budget request — on improv- 
ing its data warehousing and 
mining capabilities. 

The bureau announced that 
it awarded a contract to New 
York-based ClearForest Corp. 
to deploy business intelligence 
software that supports a new 
FBI data warehouse that con- 
sists of a Terrorism Intelli- 
gence Database and an Infor- 
mation Sharing Data Mart. FBI 
agents are currently training 
on ClearForest’s software, 


which will enable them to ana- | 


lyze multiple document repos- 
itories that house more than 
1 billion documents. 

Barak Pridor, CEO of Clear- 





Forest, said the same technol- 
ogy has been used for years at 
large Global 2,000 firms such 
as The Dow Chemical Co., 
Thomson Financial and Ford 
Motor Co. 

The FBI’s focus on data 
mining follows the March 28 
completion of the initial roll- 
out of an enterprisewide net- 
work known as Trilogy. The 
$400 million infrastructure 
program has so far yielded the 
deployment of 21,000 desk- 
tops, more than 3,000 printers 
and nearly 1,500 scanners, and 
it links 622 FBI offices via 
high-speed data connections. 
In addition, Trilogy will form 
the transport layer for the 
FBI's new Virtual Case File 
and an integrated data ware- 
house that will eventually link 
31 FBI databases through a sin- 
gle Web portal, said FBI Direc- 
tor Robert Mueller, speaking 





April 10 at a Senate Appropri- 
ations Committee hearing. 
The Virtual Case File database 
is slated to be fully deployed 
by year’s end. 

“We are now focused on 
implementing a data ware- 
housing capability that can 
bring together our informa- 
tion into databases that can be 
accessed by agents through- 
out the world as well as our 
analysts as soon as a piece of 
information is developed,” 
Mueller said. 


Long-range Plans 
But getting to this point hasn’t 
been easy, Mueller said. In ad- 
dition to having to come up 
with $138 million for the first 
phase of Trilogy out of an ex- 
isting budget that didn’t cover 
it, the bureau had to rewrite 
the original deployment plan, 
which Mueller said had pro- 
vided little long-term vision 
for technology refreshment. 
The original plan called for 
the addition of a new graphi- 


FBI Has Made Major Progress, Former IT Chief Says 


For the past 18 months, the FB! 
has been frantically trying to dig 
itself out of a knowledge man- 
agement sinkhole created by 
years of mismanaged IT projects. 
And according to the bureau's 
former IT chief, progress to date 
has been astonishing. 

Robert Chiaradio, managing 
director of homeland security at 
McLean, Va.-based BearingPoint 
Inc., spent 18 years in the FBI. 
He left the bureau last July after 
serving for 18 months as execu- 
tive assistant director for admin- 
istration. In that capacity, Chiara- 
dio was one of four officials who 
reported directly to FBI Director 


Robert Mueller and was responsi- 


ble for the bureau's entire IT 
budget. 

According to Chiaradio, years 
of deploying IT systems without a 


view toward an enterprisewide 
architecture resulted in an “im- 
provised” IT infrastructure of 
more than 50 stovepiped appli- 
cations written in various lan- 
guages and running on disparate 
systems. 

“What they ended up with was 
a Critical shortfall in knowledge 
management,” Chi- 
aradio said. “That be- 
came obvious very 
quickly after Sept. 11, 
2001.” 

However, a three- 
part modernization ef- 
fort, started under for- 
mer director Louis 
Freeh, includes the 
deployment of the 
Trilogy network, de- 
ployment of upgraded 
desktop hardware and 
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servers, and a user application 
component that focuses on Web- 
enabling a handful of the most 
important investigative databases 
and systems. The most important 
of those systems is the Automat- 
ed Case File system. 

“Web-enablement really was 
the issue,” said Chiaradio. But af- 
ter Sept. 11, “Mueller 
immediately recog- 
nized that there was no 
time to wait, and he or- 
dered that the three- 
year timeline for the 
modernization project 
be truncated to ‘as 
soon as technically 
possible.’ ” 

Several weeks after 
the attacks, Mueller 
asked Chiaradio to re- 
turn to FBI headquar- 





cal user interface, without 
providing for upgrades to the 
FBI’s central databases, said 
Mueller. Simply “putting lip- 


| stick on a pig... would not 


enable us to use the analytical 
tools we needed,” he said. 

In the aftermath of a recent 
report by the Justice Depart- 
ment’s inspector general that 
criticized the FBI for spending 
“hundreds of millions of dol- 
lars” on failed IT projects, 
Mueller said he’s tightening 
his grip on the bureau’s IT 
purchasing. “I am looking at 
the information technology 
dollars with a view to making 
certain that every one of those 
dollars is spent wisely,” said 
Mueller, referring to the $82 
million he’s requesting in this 
year’s budget specifically for 
IT refreshment and mainte- 
nance. “It makes no sense for 
us to have and put into place 
that which will be obsolete in 
two years.” 

“One of the things we still 
hear is that agents in the field 
don’t have e-mail addresses or 
access to individual machines 
because the technology just 
isn’t as widely available as it 
would be in a corporate set- 
ting,” said William Harrod, 
director of the Investigative 
Response division at TruSe- 


ters from his position as the 
agent in charge of the Tampa, 
Fia., field office, to help push the 
modernization effort into over- 
drive. Chiaradio met with the 
FBI director at 6 a.m. on Oct. 1, 
2001. The meeting lasted three 
hours, after which Chiaradio de- 
vised the concept for the Virtual 
Case File system. 


Developing the System 
Within days, Chiaradio had put 
together a team of FBI “practi- 
tioners” and had begun develop- 
ing a prototype of how the new 
system should work. What he 
found was that the FBI was pre- 
dominantly a paper-based organi- 
zation that was losing intelligence 
as fast as it was collecting it. 
“The new system was built 
with the capability to automate 
and scan all paper-based infor- 
mation into a relational database 
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Trilogy Network 


for next year. 
® Currently covers 92% of the 
FBI's U.S. workforce. 


@ Virtua! Case File will replace 
outdated system of redundant 
searches of stovepiped data- 
bases. 

@ Integrated data warehouse 
will link 31 FBI databases for 
single portal searches and 
data mining. 


cure Corp. in Herndon, Va. 
Harrod spent 14 years in 
the FBI. 

James Williams, director of 
security solutions at managed 
security services firm Solu- 
tionary Inc. in Omaha and a 
former FBI agent, said upgrad- 
ed core database systems are 
among the most critical needs 
of the FBI. “The speed at 
which you could obtain infor- 
mation was strikingly slow, 
and you would get on one sys- 
tem and not be able to get to 
another,” said Williams, refer- 
ring to his experience using 
the older automated case-file 
system. “It’s the most impor- 
tant piece of infrastructure 
that the bureau has.” D 


that can be mined. An intelli- 
gence-gathering organization 
needs to know what it knows,” 
Chiaradio said. 

By all accounts, the initial work 
was a major redesign. But the 
work is far from over. Mueller will 
need more money for what 
Chiaradio calls the cleanup 
phase, during which all of the 
data repositories that have yet to 
be redesigned for Trilogy will be 
either re-engineered or replaced. 

Several hundred back-office 
systems must also be put through 
the same process, said Chiaradio. 
One of those is the financial sys- 
tem, which the FBI plans to re- 
place with a unified financial 
management package. 

“The back-office applications 
are as important to the mission as 
anything else,” Chiaradio said. 
“They are the logistics train.” 

~- Dan Verton 





& 
You trust the rivets to hold the 
44,000-ton steel skeleton together. 


You trust the skeleton to support 
three miles of braided cable. 


You trust the cable to keep you 
suspended in mid-air. 


Shouldn't you feel the same 


way about the security of 
your network infrastructure? 
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Switch-based Wireless 
LAN Market Heats Up 


Networking 


vendors prep for launches 





BY BOB BREWIN 
XTREME NETWORKS 
Inc. and Trapeze Net- 
works Inc. last week 
introduced switch- 
based enterprise wireless LAN 
products to get a jump ina 
market that analysts expect to 
get crowded — and soon. 
Another five vendors that 
declined to be identified plan 
to launch competing products 
by the start of the Networld+ 
Interop conference in Las Ve- 
gas April 27. Similar switch- 
based systems were launched 
by Nortel Networks Ltd. last 
month [QuickLink 37435] and 
by Symbol Technologies Inc. 
last year [QuickLink 32531]. 
Older Wi-Fi hardware puts 





all the intelligence technology, 
such as security and the radio 
frequency (RF) modules, into 
a ceiling-mounted piece of 
hardware called an access 
point (AP). The newer switch- 
based architecture reduces the 
AP to a dumb terminal con- 
taining just RF modules, with 
security and management 
housed in a rack-mounted 
switch. 

Gemma Paulo, an analyst at 
In-Stat/MDR in Scottsdale, 
Ariz., said this approach al- 
lows enterprises — which 
must install tens if not hun- 
dreds of APs to cover a corpo- 
rate campus, manufacturing 
plant or warehouse — to buy 


| relatively inexpensive APs. 


| Companies can then put their 
money into switches that pro- 
vide IT managers with more 
control over their wireless 
networks than they could 
achieve with an older-genera- 
| tion “smart” AP. 

Aaron Vance, an analyst at 
Synergy Research Group Inc. 
in Phoenix, said the large 
number of companies vying to 
enter the market 
represents the 
continuing boom 
in the WLAN in- 
dustry and a sense 
of untapped op- 
portunities in the 
enterprise WLAN 
market. 

Despite this 





growth, Paulo said 
the market might 
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not be able to support so 
many new products as well as 
older systems, such as the 
smart AP-based systems from 
Proxim Corp. in Sunnyvale, 
Calif., and Cisco Systems Inc. 
She also said Cisco, the 
dominant player, could put 
heavy pressure on its competi- 
tion by introducing a similar 
switched-based architecture. 
Paulo stressed that not all 


| switched-based WLAN prod- 


ucts are equal, adding that Ex- 
treme Networks’ entry stands 
out. Its product combines the 
functionality of a 48-port 
10/100 Ethernet wired switch 
with a system that can manage 
dumb wireless 
APs that operate 
under the 802.11b, 
802.lg and 802.lla 
standards. 

Vipin Jain, vice 
president of the 
WLAN access 
group at Santa 
Clara, Calif.-based 
Extreme Net- 
works, said all 





WLAN management is built 
into the switch. The Extreme 
Networks Summit 300-48 
switch sells for $6,495, while a 
dumb AP selis for $595. 

Paulo said WLAN switch- 
based products from Symbol 
and those introduced last 
week by Pleasanton, Calif.- 
based Trapeze Networks lack 
the tight integration between 
wired and wireless networks 
offered by the Extreme Net- 
works system. 

But according to Vance, 
they do provide easier central- 
ized management than older 
APs, which need an upgrade 
in firmware if network man- 
agers want to beef up security. 
Trapeze has also built in the 
ability to detect unauthorized 
users and rogue APs on the 
network. D 


MORE ON THIS TOPIC 


For comprehensive coverage of wireless 
LAN systems, visit our Mobile/Wireless 
Knowledge Center: 
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BMC Looks to Simplify 
Mainframe Management 


Software targets 
IT workers lacking 
mainframe skills 
BY MARC L. SONGINI 
In a bid to help mainframe- 
dependent companies protect 
their investments, BMC Soft- 
ware Inc. is rolling out soft- 
ware designed to simplify and 
automate big-iron systems 
management processes for a 
wider group of IT workers. 
Houston-based BMC today 


plans to announce System Ad- | 


visor for z/OS, the first in a 
planned line of Java-based 
tools that it said will let IT 
staffers who lack mainframe 
skills manage mainframe com- 
puting resources. For example, 
network or Unix specialists 
will be able to use the soft- 
ware to manage mainframes 
via a streamlined graphical 
user interface (GUD. 

alvin Guidry, vice presi- 





dent and general manager of 
enterprise systems manage- 
ment at BMC, said keeping 
mainframes running smoothly 
could become more of a chal- 


| lenge as companies face a pre- 


dicted shortage of mainframe- 
savvy IT workers [QuickLink 
37362]. 

Typically, mainframes are 


PRODUCT DETAILS 


System Advisor 
KEY FEATURES: 
@ Built around a browser-based, 
Windows-style GUI. 
@ Includes the ability to manage 
mainframe clusters and storage 
systems. 
PRICING AND AVAILABILITY: 
® Starts at $17,000 and is ship- 
ping now. 
@ Prices vary depending on how 
it’s configured. 


managed through 3270 green- 
screen terminals or special- 
ized interfaces, Guidry said. 
Among other features, the 
System Advisor GUI uses text 
messages to help simplify sys- 
tems configuration and appli- 
cation service management 
tasks, he noted. Systems man- 


| 5 
agers will also be able to use 


the software to set perfor- 
mance thresholds, restart sys- 
tems and oversee workload 
management, data integrity 
and storage operations, ac- 
cording to BMC. 

Given the graying of the 
mainframe workforce, that 
sort of point-and-click tool 
could help younger IT staffers 
get up to speed on main- 


frames, said Larry Riggen, a 


principal technology consul- 
tant at Cinergy Corp., a 
Cincinnati-based utility and 
energy services firm. 

At Cinergy, which runs 
BMC’s Mainview mainframe 
management software and its 
tools for managing DB2 data- 
bases, there is also tremen- 
dous pressure to cut costs, 
Riggen said. The utility will 





probably consider BMC’s new 





offering as a potential way to 
meet those goals, he added. 
Computer Associates Inter- 
national Inc. and IBM’s Tivoli 
Software unit have also recog- 
nized the anticipated thinning 
of the mainframe talent pool, 
said Richard Ptak, an analyst 
at Ptak & Associates Inc. in 
Amherst, N.H. He said both 
CA and Tivoli will likely make 
similar product announce- 
ments in the near future. 





CA said it already sells sev- 
eral Windows-based tools like 
System Advisor to ease main- 
frame job management, auto- 
mation and security adminis- 
tration for IT staffers trained 
on other systems. Tivoli said it 
is shipping a mainframe man- 
agement application that can 
be used by various IT workers 
and is developing portal soft- 
ware to provide integrated 
mainframe monitoring. D 


Corrections 

An April 14 News section story 
(“Intrusion Prevention Touted 
Over Detection”) misidentified 
the company that’s acquiring 
Entercept Security Technologies 
Inc. and IntruVert Networks Inc. 
Earlier this month, Network As- 
sociates Inc. agreed to buy both 
Entercept and IntruVert. 


in a March 31 Management sec- 
tion story (“Cold Calls Feeling 
the Heat”), the annual fee that 
Bankers Life and Casualty Co. 
pays to use Gryphon Networks 
Corp.'s call-blocking service was 


incorrectly reported. Bankers Life 
doesn't release the payment infor- 
mation. 


In the same story, Iiluminet was in- 
correctly identified as a long-dis- 
tance telecommunications carrier. Il- 
luminet, which is owned by VeriSign 
Inc., sells SS7 network and data- 
base services to carriers. 


Asstory in the March 24 News sec- 
tion ("War May Prompt Firms to De- 
fay Offshore Work”) incorrectly listed 
the location of The Telvista Co., 
which operates outsourcing call 
centers in the U.S. and Mexico. 
Telvista is in Dallas. 
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Bank of Ireland 
Picks HP to Run IT 


The Bank of Ireland said it has 
chosen Hewlett-Packard Co. for 
a seven-year IT outsourcing con- 
tract worth about $600 million, 
pending final negotiations with 
HP. A spokeswoman for the 
Dublin-based bank said it will 
likely take four to six months to 
agree on the full terms of a con- 
tract. About 500 of the bank’s [7 
workers are due to be trans- 
ferred to HP as part of the deal. 


Intel Puts 3-GHz 
Processor on Hold 


Intel Corp. ialted shipments of a 
3-GHz Pentium 4 processor, just 
hours after formally announcing 
the chip. Intel said that it had 
found an unspecified “anomaly” 
in a small number of the devices. 
HP, Dell Computer Corp. and 
Gateway Inc. introduced desktop 
systems that use the new proc- 
essor, but all three said they 
were unsure how the shipment 
hold would affect their deliveries. 


EMC Sees Profits 
For Rest of 2003 


EMC Corp. reported a first-quar- 
ter profit of $35 million and said 
it expects to stay in the black 
for the rest of the year. The Hop- 
kinton, Mass.-based storage 
vendor said it had revenue of 
$1.38 billion in the first quarter, 
up 6% from the year-earlier lev- 
el of $1.3 billion. EMC also ac- 
quired Astrum Software Corp., a 
Boston-based vendor of storage 
resource management software. 


Short Takes 


QUANTUM CORP. in Milpitas, 
Calif., and STORAGE TECHNOLOGY 
CORP. in Louisville, Colo., filed du- 
eling lawsuits. They have charged 
each other with infringing on 
patents related to tape drives. . . . 
PEOPLESOFT INC. in Pleasanton, 
Calif., announced a set of 13 busi- 
ness applications tailored for mid- 
size users with annual revenue of 
up to $500 million. 





AMD Readies Rollout 
Of 64-bit Server Chip 


Microprocessor 
will also support 
32-bit applications 


BY TODD R. WEISS 
HIP MAKER Ad- 
vanced Micro De- 
vices Inc. will for- 
mally launch its 64- 

bit Opteron server processor 

tomorrow, and some software 
and hardware vendors have 
been quick to jump on the 
bandwagon. 

For example, SuSE Linux 
AG plans to make available 
this week a version of its Lin- 
ux distribution for use on 
Opteron-based systems. Nur- 
emberg, Germany-based SuSE 
has created a release of the 
open-source operating system 
that lets users run 32-bit appli- 





cations as well as 64-bit ones, 
said Markus Rex, SuSE’s vice 
president of development. 
SuSE built the release out of 
the same code it uses for 
servers based on Intel Corp.’s 
Itanium and x86 chips and 


| IBM’s mainframe, midrange 


and Unix systems, which 
should make it easier for ven- 
dors to develop applications 
for Opteron systems Rex said. 
Red Hat Inc. in Raleigh, 
N.C., said it plans to have an 
Opteron-enabled version of its 
Linux operating system ready 
in the fall. Meanwhile, Micro- 
soft Corp. earlier this month 
said it will start beta-testing 
64-bit versions of Windows 
XP and Windows Server 2003 
for Opteron and AMD’s up- 
coming Athlon 64 desktop 
processor by midyear. 








IBM said it will have an 
Opteron version of its DB2 
Universal Database ready this 
summer, initially supporting 
SuSE’s Linux software. Oracle 
Corp. confirmed that it’s also 
developing a release of its 
Oracle9i database that will run 
on Opteron-based systems. 

Sunnyvale, Calif.-based 
AMD said it’s talking with top 
server vendors about using 
Opteron in their systems. 


Opteron Facts 
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NetWare 


stable operating systems; it 
just wasn’t as usable. Now 
they’re making it more usable 
with Linux.” 

Gardner acknowledged that 
his company, a steadfast Nov- 
ell user, had some concerns 
about NetWare’s future. 

Although there is no official 
ship date for NetWare 7, Mess- 
man said Novell will follow its 
standard timeline of approxi- 
mately 18 months between 
NetWare releases. 

Messman said users who are 
paying maintenance fees will 
have the option to eventually 
migrate from the NetWare 
kerne! to Linux. “It’s a good 
migration path for NetWare 
users who were worried about 
where we were going with 
NetWare,” he said. 

Ensuring that file, print, 
storage, directory, Web devel- 
opment, resource manage- 
ment and other NetWare ser- 
vices will be available for the 
long haul “gives customers 
comfort,” Messman added. 





“T think it’s a good strategy,” 
said Elizabeth Lenzi, manager 
of IT at Prevent Child Abuse 
America. Officials at the 
Chicago-based nonprofit orga- 
nization “had a lot of concern” 
about where Novell was head- 
ing with NetWare, she said. “It 
seems like they’re coming 
back strong, hopefully.” 

Even some users who said 
they lacked such worries are 
supporting the Linux strategy. 

“Tt sounds like a great idea,” 
said Victor Ponelis, a NetWare 
technologist at the University 
of Wisconsin-Madison. “For 
my part, there’s no concern 
that NetWare is going to go 
away. We will simply adapt as 





the industry adapts.” If the 
NetWare kernel goes away, he 
added, “the services will be 
running on something else.” 

Novell Vice Chairman Chris 
Stone said the decision to of- 
fer the Linux migration path 
was driven by users. “They 
were looking for an open 
door,” Stone said. “We all 
know that NetWare’s revenue 
has been dipping over the 
years. So what do you do? You 
take the services and you 
make them the value.” 

Stone and Messman both 
contended that for NetWare 
users, having the choice to mi- 
grate to Linux will be more 
important than actually exer- 
cising it. “I think once they get 
that option, they’ll choose not 
to do it,” Messman said. “They 
just need to know they can.” 

But some BrainShare atten- 
dees said that they had no in- 
tention of migrating off of 
NetWare in the first place. 

“Our core processing is all 
done on NetWare, and that’s 
not going to change in the 
foreseeable future,” said Ken 
Forgie, assistant vice president 
and IT manager at Asheville 
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Some smaller server makers, 
including Polywell Comput- 
ers Inc., M&A Technology 
Inc. and Penguin Computing 
Inc., have already signed up 
to use the new chip. In addi- 
tion, Nvidia Corp. in Santa 
Clara, Calif., said it plans to 
announce an Opteron-opti- 
mized graphics motherboard 
chip set for high-end work- 
stations. 

Bill Claybrook, an analyst 
at Aberdeen Group Inc. in 
Boston, said Opteron gives 
AMD a potential advantage 
over Intel’s 64-bit Itanium 
chips because of its support 
for 32-bit applications. “With 
Itanium, you have to port 
them, and it’s not necessarily 
an easy port,” he said. 

The support for both 32- 
and 64-bit applications is 
where “AMD is really starting 
to show some muscle,” said 
Ted Schadler, an analyst at 
Forrester Research Inc. in 
Cambridge, Mass. “That’s 
pretty powerful, and obviously 
a decision Intel didn’t make.” D 


Savings Bank in Asheville, 
N.C. “They’re a stable enough 
company where we’ve never 
really had those doubts.” 

In addition to giving Net- 
Ware users a possible way for- 
ward, Novell is claiming that it 
has a lot to contribute to the 
open-source community by 
improving the Linux kernel. 

“Linux is an immature oper- 
ating system right now,” Mess- 
man said in an interview with 
Computerworld. “It hasn’t had 
somebody like Novell worry- 
ing about making it robust, re- 
liable and scalable for very 
much time. We think we can 
bring that to the Linux kernel.” 

In a letter to Linux Weekly 
News, Messman subsequently 
apologized for calling Linux 
“immature.” He stressed that 
“Novell wouldn’t be taking 
this bold step if we didn’t feel 
Linux was a solid operating 
system” [QuickLink a3060].D 


MORE ONLINE 


Novell Vice Chairman Chris Stone 
discusses the internal “food fights” that 
yielded the Linux strategy: 
QuickLink 37836 
www.computerworld.com 
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me IT Budgets Put 
Crimp in SAN Plans 


Storage managers 
look to add tools 
to automate tasks 


BY LUCAS MEARIAN 
PHOENIX 
ARYL BLACK, a stor- 
age architect at 
Telus Communica- 
tions Inc., last week 
said the biggest challenge he 
will face this year is trying to 
manage the company’s 170TB 
of storage following layoffs 
that cut Telus’ IT staff from 
1,300 people to 750. 
With only 30TB of net- 
worked storage in place, Black 
said, increasing the amount of 


Continued from page 1 
Storage 


vices from different vendors. 
“That will be where we'll be 
able to achieve the functional- 
ity we want,” she said. 

One potential roadblock is 
corporate reluctance to spend 
money on new technologies 
(see story above). But virtual- 
ization software, which makes 
the storage space on different 
disks look like a single pool, is 
becoming the cornerstone of 
efforts to develop more auto- 
mated storage infrastructures. 

Most products now on the 
market support virtualization 
on a single disk array or serv- 


Virtualization Vendors 





disk capacity that resides on 
Vancouver, British Columbia- 
based Telus’ storage-area net- 
work (SAN) represents the 
lowest-hanging fruit for him. 
Black was one of 
many Storage 


STORAGE 


John Dias, a systems engi- 
neer at Hibernia Corp. in New 
Orleans, said he and other IT 
staffers there had to contend 
with budget cutbacks that 
forced them to re- 
justify technology 


Networking 
World attendees 
who said they’re 
looking to in- 
creased automation and stor- 
age consolidation as ways to 
do more with fewer resources. 

But some attendees said 
they’re getting push-back 
from higher-level executives 
who are still reluctant to 
spend money on emerging 
SAN technologies. 


er. Network-based virtualiza- 
tion promises to allow disk 
storage devices across an en- 
tire SAN to be centrally man- 
aged as a single entity. 

Cisco Systems Inc. and Bro- 
cade Communications Sys- 
tems Inc. are both building 
network-based virtualization 
capabilities into their storage 


| switches. Meanwhile, Hewlett- 


Packard Co., Sun Microsys- 
tems Inc. and IBM are ship- 
ping or will soon ship prod- 
ucts that support virtualiza- 
tion approaches, though 
initially for their own storage 
devices only. 

Rod Lucero, chief IT archi- 
tect at Conseco Finance Corp. 
in St. Paul, Minn., said virtual- 


IBM is expected to announce next month a virtualization appliance 
that will be built around two redundant Linux servers and support its 


disk arrays. 


CISCO said it plans to develop modules that support virtualization 
techniques for its MDS 9000 line of storage switches. 

BOTH HP AND EMC are developing storage management software 
for new Brocade switches that support network-based virtualization. 
SUN this month announced storage pooling and consolidation capabili- 
ties that are available through its IT services unit. 
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investments pre- 
viously approved 
by officials at the 
bank. “We're not 
able to buy everything we 
wanted,” Dias said. 

In November, Dias deployed 
a storage resource manage- 
ment tool that lets him see 
what data is being stored 
where on Hibernia’s 25TB 
SAN. But Dias noted that he 
still can’t convince upper 


ization tools are helping the 
company save money. That's 
particularly important as Con- 
seco Finance seeks to emerge 
from Chapter ll bankruptcy 
protection, which it filed for 
in December along with par- 
ent company Conseco Inc. 

Last year, Lucero installed 
a virtualization appliance 
made by Fort Lauderdale, Fla.- 
based DataCore Software 
Corp. to pool together 70TB of 
storage on EMC Corp.’s Sym- 
metrix and Clariion arrays. 
Since the rollout, Lucero said, 
storage utilization rates on the 
SAN have increased from 
about 55% to 85%. In addition, 
the time it takes to provision 
storage space for new applica- 
tions has been cut from four 
days to one hour. 

The $190,000 that Conseco 
Finance paid for the DataCore 
software has already been re- 
couped by the company three- 
fold through cost savings, 
Lucero said. For example, it 
was able to postpone plans to 
buy an additional 3TB of ca- 
pacity, saving about $280,000. 
“The next thing to move to- 
ward ...is the ability to have a 
single interface that allows me 
to see my infrastructure from 
end to end,” Lucero added. 








management that performing 
incremental rather than full 
backups of servers would help 
the company conserve storage 
space. 

Gary Pilafas, a senior stor- 
age and systems architect at 
UAL Loyalty Services Inc., a 
unit of United Air Lines Inc. 
that manages the company’s 
frequent-flier program, said 
business managers are tired of 
seeing his face every quarter. 
“Whether it’s for $100,000 for 
storage or a million... the first 
question out of their mouth is, 
‘How do we really know how 
you're using it?’ ” Pilafas said. 

Pilafas in December was 
able to deploy a SAN manage- 
ment tool developed by Long- 
mont, Colo.-based CreekPath 
Systems Inc. that uses prede- 
fined policies to automate 
storage reporting, provision- 
ing and security, greatly re- 
ducing the time IT workers 
need to devote to those for- 


Currently, no top-tier ven- 
dors sell network-based virtu- 
alization products that sup- 
port rival storage devices. But 
HP and EMC have both said 
that they plan later this year to 
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merly manual tasks. 

Yet Pilafas said he still wres- 
tles with business manage- 
ment to get them to under- 
stand that United needs to 
take more steps to ensure that 
things won’t break down as 
the SAN grows. “You need to 
be proactive in establishing 
what could potentially happen 
if we don’t do this,” he said. 

Glenn Exline, manager of 
advanced technologies at 
Patrick Air Force Base in Cape 
Canaveral, Fla., said funding 
allowed him to deploy a SAN 
last September to replace the 
base’s direct-attached storage. 
The storage network has let 
the base’s IT staff consolidate 
servers and cut its data back- 
up window from 14 hours to 
just two, Exline said. Now he 
hopes to buy a storage re- 
source management tool to 
give him and other IT man- 
agers a better view of what’s 
being stored on the SAN. D 


make their storage manage- 
ment software available on 
new switches made by San 
Jose-based Brocade that sup- 
port virtualization on multi- 
vendor SANs. D 


Storage Group Releases Proposed 
Management Software Standard 


After years of foot-dragging by 
vendors, the storage industry is 
finally coming together around an 
open storage management soft- 
ware interface that's expected to 
reduce the complexity of manag- 
ing multivendor SANs. 

The Storage Networking Indus- 
try Association (SNIA), which rep- 
resents about 300 vendors, an- 
nounced at Storage Networking 
World that it has published for 
public comment Version 1.0 of the 
Storage Management Initiative 
Specification (SMI-S), a 350- 
page set of interface guidelines 
formerly known as Bluefin. 

SMI-S will provide storage 
management vendors with com- 
mon application programming in- 
terfaces. The specification uses 
two related standards: an object- 
oriented storage management 
framework called the Common In- 


formation Model (CIM), and Web- 
Based Enterprise Management, 
which defines an interface layer 
for sharing CIM data between 
products. 

During a presentation at the 
conference, SNIA Chairman 
Sheila Childs called on users to 
insist that vendors make their 
storage management software 
compliant with SMI-S, The speci- 
fication is expected to be finalized 
by October, she said. 

Joel White, a business technol- 
ogist and storage architect at All- 
state Insurance Co. in North- 
brook, Ill., said that once SMI-S is 
adopted by vendors, he should be 
able to use a single management 
application to control mixed stor- 
age installations. “That's going to 
help us ensure our investment in 
legacy hardware,” White said. 

~ Lucas Mearian 
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The Unwired Office 
starts inside. 


Introducing Intel’ Centrino’ mobile technology. 
The new generation of laptop technology 
engineered to unwire your business. 


Until now, the promise of 
inst a truly wireless workforce 
has been just that: a 
vom Promise. Intel’ Centrino 
recnotogy mobile technology delivers 
on that promise with unprecedented 
levels of mobility for your users 
and an easier deployment for you. 
intel is working with other 
industry leaders to make 
wireless networking not only 
reliable, but secure. Intel Centrino 
mobile technology is compatible 
and validated with Cisco enterprise 
access points. And Intel continues 
to work closely with VeriSign, 
Check Point Software and 
other leading technology companies 
to optimize security solutions. 
The unwired office starts inside. 
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The Accordion Effect 


ARY PILAFAS CALLS what the stor- 
age industry is experiencing right 
now the “accordion effect,” referring 
humorously to the way the old-fash- 
ioned musical instrument makes 
music only when all that hot air is squeezed out. 
As a senior storage architect at UAL Loyalty Serv- 


ices Inc., the e-commerce 
arm of financially stressed 
United Air Lines, Pilafas 
has a front-row seat for 
this particular concert. 
“Tt’s the march to consoli- 
dation,” he said last week 
at Computerworld’s Stor- 
age Networking World 
conference in Phoenix. 
“Tt’s happening now, and 
it’s a good thing.” 

Consolidating storage 
resources to cut costs 
and streamline manage- 
ment was a dominant 
chord struck at the gathering of 1,800 
IT professionals, storage managers 
and vendors. When audience mem- 
bers were polled about what the top 
benefits of storage networking tech- 
nologies are, consolidation was the 
top pick, beating out cost savings and 
improved functionality. IDC esti- 
mates that consolidating access and 
data management into a single loca- 
tion can slash storage management 
costs by up to 70%. 

“Everybody into the resource pool” 
was another popular tune. That one 
refers to the flurry of virtualization 
software offerings now showing up to 
audition for skeptical users, who are 
rightly figuring that this technology 
has miles to go before its promises 
will be kept. Virtualization software 
holds out the hope of making disk 
space on different servers appear as a 
single storage pool, to be dipped into 
and divvied up as needed across the 
network. 

But if this accordion effect is mak- 
ing music from consolidation and vir- 
tualization, what’s getting squeezed 
out as so much hot air? The once- 
stunning profits from storage hard- 
ware sales and the future of propri- 
etary or closed storage architectures. 

The storage industry is sliding fast 





down the slope of hard- 
ware commoditization, 
sending vendors scram- 
bling for new ways to 
make money as old busi- 
ness models slip away. 
Sales of disk storage fell 
from $174 billion in 2001 
to $13.3 billion last year, 
according to IDC. That 
sales decline also reflects 
the steadily dropping 
price of a megabyte of 
storage, which has plum- 
meted at least 40% in the 
past few years. Meta 
Group predicts that while storage- 
related costs will constitute 70% to 
80% of server purchases through 
2004, storage hardware sales will de- 
cline 30% or more as the emphasis 
shifts to software, services and stor- 
age-area networks (SAN). 
As this spending shift accelerates, 
so too will the migration toward open 
architectures and standards. If last 





week’s conference is any indication, 
users will be dragging their vendors 
there by the hair. Storage managers 
ultimately want storage infrastruc- 
tures to be as reliable, highly avail- 
able and standardized as Ethernet 
networks. 

“Standards have now gotten to the 
point where customers have been able 
to force some interoperability onto 
the vendors,” noted Pierre Baudet, 
business systems manager at New 
Balance Athletic Shoe Inc. and a con- 
ference speaker. 

Making a virtue out of that nec- 
essity, the Storage Networking Indus- 
try Association last week unveiled 
specifications for its long-anticipated 
Bluefin technology. This open man- 
agement software interface standard 
— designed to help users apply cen- 
tral controls to enterprisewide SANs 
— already has the backing of dozens 
of storage vendors, including IBM, 
EMC, Hitachi, Sun and Veritas Soft- 
ware. Renamed as the Storage Man- 
agement Initiative, or SMI, this speci- 
fication is the storage industry’s first 
giant step toward an interoperability 
standard. 

So as we wait for the next chorus to 
begin, users should lean hard on their 
storage vendors to incorporate this 
emerging standard in upcoming prod- 
ucts. And vendors should be asking 
themselves, “Do I want to make music 
or just blow hot air?” D 
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Web Services: 
Been There, 
Done That 


HE THING TO DO 

when evaluating re- 

quirements for a new 
computing environment is to 


learn a little history. 

In the new era of distributed Web 
services, you’re expected to manage 
things you don’t control. Sure, there’s 
lots of simplicity and clarity, with ar- 
chitectures (such as SOAP) that make 
it easier to connect things together, 
but that shifts the burden to the man- 
agement of these services. For exam- 
ple, how do you distinguish requests 
from different customer groups? Or 
how do you identify breaks in a Web 
service request? 

But we’ve been here before, with the 
management of databases and applica- 
tions. And, not so 
strangely, some of 
the players have re- 
mained the same as 
well. At Oakland, 

Calif.-based Amber- 

Point Inc., several 

members of the exec- 

utive team are veter- 

ans of Ingres and 

Forte, where they 

tackled similar issues. 

Ingres started out 

with a relational data- 

base system, and Forte offered tools to 
build distributed applications with ap- 
portioning and partitioning. Even the 
venture backers remain constant; Palo 
Alto, Calif.-based Sutter Hill Ventures 
invested in all three companies. 

This continuity of venture capital 
investment is important because it 
sends two signals: first, that the vendor 
experience is mature and linear, and 
second, if Sutter Hill’s histories with 
Forte and Ingres are examples, that 
you can be reasonably assured that 
longevity is built into the company’s 
business plan. Both Ingres and Forte 
were around for a decade before being 
acquired by Computer Associates and 
Sun Microsystems, respectively. 

But understanding the operational 
requirements your company faces 
should get your attention when opting 
for Web services. Right now, you’ve 
got three basic approaches to Web ser- 
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vices, each of which requires its own 
management method. 

First, there’s the Web service you 
internally build in Java or .Net and for 
which you maintain the source code. 
Second, there are packaged Web ser- 
vices from the likes of PeopleSoft, SAP 
and Microsoft (things that you install 
but don’t have the source code for and 
that are therefore out of your control). 
Finally, there are the external Web ser- 
vices that your company or depart- 
ment uses although it has little say 
when it comes to versioning or up- 
grades. Chances are, most companies 
will have a mixture and still be faced 
with the prospect of keeping every- 
thing up and running. 

As more Web services show up in 
application servers, plan to investigate 
tools that can look at messages and 
manage them based on what’s in the 
message. Also, select vendors with 
deep IT management experience, real- 
istic financial backing and a willing- 
ness to admit that the problems of to- 
day aren’t the problems that will need 
to be addressed a year from now. D 


ARI KAPLAN 








_ OPINION 


to you, require proof that 
your counterpart owns all 
of the intellectual property 
that’s subject to the trans- 
action. And while you’re at 
it, secure a warranty on the 
functionality of the applica- 
tion being shared or ac- 
cessed. Make sure it’s scal- 
able, too. (This is key for 
emerging growth compa- 
nies that could have 1,000 
users one month and 
100,000 the next.) 

In your agreement with 
the third party, clearly state 
who owns the final application. Own- 
ership of the end result can be tricky 
because some programs require exten- 
sive maintenance, which may prove 
difficult for a limited in-house team to 
handle. Nevertheless, possession has 
significant control-related advantages. 

If you're offering your customers 
data that they will rely on to make im- 
portant decisions such as stock pur- 
chases, you could expose your compa- 
ny to certain liabilities. (I don’t want 
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to even think about the call 
I would get from my moth- 
er-in-law if she bought her 
stock at the wrong price 
because of a misquote.) 
CIOs should therefore re- 
quire assurances against, 
as well as indemnification 
for, any incorrect data (not 
including market fluctua- 
tions, of course) in any 
contracts they sign. 

Supply chain pacts 
should require that the 
networks on which infor- 
mation travels are secure, 

and they should contain more detailed 
provisions that outline cyberterrorism 
contingencies specific to your busi- 
ness. In the event of a cyberattack, try 
to obtain preferences for your systems 
so you will be the first to get the data 
once the feed has been repaired. 

Be aware that developers can build 
time-activated codes or periodic re- 
authorizations into their work. This is 
designed to give them the option of 
turning off the feed when you don’t 





live up to your end of the bargain. Al- 
though it’s typically a last resort and 
requires notice of its use, it can hap- 
pen. You should, therefore, address 
such limits upfront. 

Disagreements can also arise, so in- 
clude a dispute-resolution provision. 
In the modern environment, cost- and 
time-conscious CIOs may want to 
consider online alternatives. They can 
be faster, more efficient and don't re- 
quire long-distance travel or litigation. 

Perhaps most important in manag- 


| ing risk is obtaining comprehensive 


insurance that provides for all contin- 
gencies. Companies should also build 
redundancy into their systems so that 
they always have a backup supplier of 


| critical items. 


Ultimately, entering negotiations in 


| good faith and with reasonable expec- 


tations is the key — anything to avoid 


| that call from my mother-in-law. D 





WANT OUR OPINION? 


More columnists and links to archives of previous 
columns are on our Web site 
www.computerworld.com/columns 


a a 


Legal Links 
For Your 
Supply Chain 


OR THE PAST FEW 

weeks, my mother-in- 

law has been eyeing a 
certain technology stock, 


waiting for it to reach her 
strike price. To monitor the markets, 
she uses a tracking service that 
streams quotes on her cellular phone. 
If you offer a service like this — one 
that requires data from an unrelated 
third party — be sure to structure 
your arrangement wisely to ensure 
your protection and your customers’ 
satisfaction, especially if you count 
my mother-in-law among them. 

IT managers aren’t always involved 
in these business or legal discussions. 
But they should be, especially when 
data access is at issue. 

Before these talks begin, a nondis- 
closure agreement must be signed. 
This will preserve confidentiality and 
protect trade secrets, which may in- 
clude the design of your proprietary 
systems to which the data feeder may 
have access. 

If copyrighted data is being offered 





New Buzzwords Are Just Old IT Ideas 


HE LATEST “real-time enter- 

prise” hype from Gartner is just 
classic IT from the last decade re- 
packaged with a new set of buzz- 
words [“Gartner: Change Manage- 
ment Needed Before Real-Time 


Data Can Flow,” QuickLink 37350}. 


There's no doubt that it's a good 
thing; it's just not a new thing, ex- 
cent for the latest enabling tech- 
nology, Web services and portals - 
and even those aren't that new 
anymore. 

The concept of leveraging tech- 
nology to reduce processing time 
is as old as IT itself. | agree that 
change management is a critical 
component of ensuring the suc- 
cess of any investment in real-time 
data flow. But that’s the case with 
introducing any new capability to 
a business. 

Haven't we figured that out with 
the past decade of taking brick- 
and-mortar companies online? As 
you introduce new technology, the 
management team needs to be on 
board with how to run the business 
differently to fully leverage it. 

And it doesn't logically follow 
that there’s an “increased need . . 


to get real-time applications and in- 


terfaces built quickly.” Gartner is 





stretching quite a bit to use its 
“real-time enterprise” concept to 
justify rapid development. You 
could conceivably take a long time 
to develop a real-time enterprise 
application, and it will still get you 
the data in real time once it’s up 
and running. 

Scott Marean 

Assistant vice president 

of program management 
services, First Penn-Pacific 
Life Insurance Co., 
Schaumburg, IIL, 


scott_marean@firstpenn.com 


More Hiring Needed 


N ALL BUT the most gigantic en- 
terprises, the problem is even 
worse than described in the article 

“Gartner: Change Management 
Needed Before Real-Time Data 
Can Flow.” My example comes 
from the health care industry, but | 
saw the same problems in state 
government, where | worked for 
seven years. 

Many health care organizations 
are having to embrace electronic 
patient records, electronic insur- 
ance-claims processing and sub- 
mission, and other systems pur- 





suant to HIPAA. However, they are 
trying to do it without following IS 
best practices in any sense of the 
words. They don’t staff positions 
such as computer operator, pro- 
grammer or systems analyst; they 
just plain don't hire any more IT 
people than they had before they 
went to electronic records. They do 
hire well-trained and competent 
people, but they want programming 
and systems analysis out of the 
guys they're forcing to sit at the 
help desk all day. 

Am | the only one who thinks 
programming, systems analysis 
and similar disciplines require sus- 
tained focus? 

Geof Rarick 
Database/network/ 
telecom administrator, 
Thoracic & Cardiovascular 
Institute, Lansing, Mich., 
grarick@tciheart.com 


What Iraq Needs 


LTHOUGH COMPUTERWORLD 

is dedicated primarily to com- 
puter technology and its impact 
on the world, | think your writers 
could use a bit of a wider view on 
the topic of war in Iraq [“Postwar 
Iraq May Be Big IT Market,” Quick- 
Link 37179]. In postwar Iraq, there 





will not be an immediate need for 


| anIT infrastructure. There will be 


immediate needs for a stable gov- 
ernment, assurance of continued 
food and potable water supplies, 
decent health care, freedom from 
the potential of intertribal conflict, 
ease of transportation and all other 
aspects of life necessary for a sta- 
ble society. 

The people of Iraq will have 
suffered enough from Hussein's 
depredations. Let's see how tech- 
nology can help clean up that mess 
first, before the megacorporations 
start slavering over their next 
rounds of profits. 

P.D. Levin 


| R&D systems engineer, 


Pittsburgh 


COMPUTERWORLD welcomes 
comments from its readers. Letters 
will be edited for brevity and clarity. 
They should be addressed to Jamie 
Eckle, letters editor, Computerworld, 
PO Box 9171, 500 Old Connecticut 
Path, Framingham, Mass. 01701. 
Fax: (508) 879-4843. 

E-mail: letters@computerworld.com. 
Include an address and phone num- 
ber for immediate verification. 


More letters on these and other 
topics are on our Web site: 
computerworld.com/letters 
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ll for Nominations 


ls youreorganization making the most 
of technology on the cutting edge? 


We want to hear about It! 


Computerworld’s Innovative Technology Awards 2003 will honor 
the industry's top vendors that are helping their customers 
achieve business value through technology. 


Tell us about your successful technology application 
and nominate your vendor online at 
www.computerworld.com/research/innovativetech 


ABOUT THE AWARDS 

For the second year, these customer choice awards will 
spotlight leading vendors and showcase how their customers 
are using technology to solve business problems in real-world 
settings. Nominations from IT customers will be collected 
from now through May 12, 2003. Nominated vendors will be 
surveyed about their technology applications. A panel of 
outside experts and Computerworld editors will review the 


Surveys and choose the winners. 


COMPUTERWORLD 


from IT leaders using these technologies will be INNOVATIVE 
published in the September 22, 2003, issue, 
as well as online at Computerworld.com. TECHNOLOGY 


Need More Contact InnovativeTech@computerworld.com. 
Information? But hurry! The nomination deadline is May 12, 2003. 


Survey results and stories that offer practical advice 
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Q&A 
Nothing but ’Net 


Carol Ptak, PeopleSoft’s manufacturing- 
industry strategist, talks about Internet 
architecture, technology that makes 
money for both the customer and the 
vendor, and Post-it notes. Page 32 


FUTURE WATCH 
The Web’s Next Leap 


| With the Semantic Web, Tim Berners- 
Lee, the inventor of the World Wide 
= Web, leads the drive to infuse intelli- 
gence into his creation and open the 
door to new services. Page 34 


ENTERPRISE SEARCH ENGINES IMPROVE PRODUC- 
TIVITY BY ALLOWING SEARCHES ACROSS DISTRIB- 
UTED, DISPARATE DATA SOURCES. BY DREW ROBB 





NTRANET PORTALS can Offer a sin- 
gle point of access to all of a com- 
pany’s documents, but employees 
may still waste time trying to find 
what they need among those thou- 
sands — or millions — of documents. 


WIDEN 


THE SEARCH NET 





By interpreting user queries, searching 
across different data stores and pre- 
senting the most relevant results, en- 
terprise search engines (ESE) simplify 
the task of finding the right informa- 
tion in the right context, regardless of 
the source. 

Search-and-index technologies are 
built into many applications, but they 
let you find data only within the asso- 
ciated application and can’t hunt 
through the many data repositories an 
organization might have. ESEs typical- 
ly search both structured and unstruc- 
tured information in many different 
formats and across all the devices on 
the corporate network. 

The sheer volume of documents at 
Anadarko Petroleum Co. drove Bob 

Downing, manager of business 

systems, to deploy an ESE. “Our 
engineers, geologists and geo- 
physicists were spending about 

50% of their time searching 

for information among over 2 million 


04.21.03 


SECURITY MANAGER'S JOURNAL 


The Battle Against 

Pornography Continues 

When Vince Tuesday looks into automated 
mail filtering, he finds that one vendor’s 
pornography-detection software works bet- 
ter than he expected. Page 35 


| documents on our intranet,” he says. 
| The Woodlands, Texas-based oil com- 


pany installed Vienna, Va.-based Con- 
vera Corp.’s RetrievalWare to index 


| and search its content repository. 


Anadarko’s ESE indexes all of the com- 


; pany’s SQL databases, its intranet, Win- 
| dows file-server directory structures 


and everything stored in its content 


| management system from Pleasanton, 


Calif.-based Documentum Inc., as well 


| as several online news sources. Down- 


ing estimates that the engineering group 


| now saves 78,000 hours annually by 


using the new search functions. 


| Bag of Tricks 

| ESEs use a mix of technologies to find 

| the right result, and the products con- 

| tinue to improve. “A lot of the technol- 
ogy has been around for a while, but 


we are now Starting to see practical ap- 


| plications ... in the business realm,” 

| says Laura Ramos, an analyst at Cam- 
| bridge, Mass.-based Giga Information 
| Group Inc. 


ESEs have the same core elements as 


Internet search engines: They spider en- 
| terprise content (locate documents by 
| following hypertext links), index it and 


Continued on page 28 
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Continued from page 25 

present it in response to user queries. 
However, the indexes can be quite large. 
Washington-based law firm Dickstein 
Shapiro Morin & Oshinsky LLP has 
nearly 1,000 employees and several mil- 
lion documents: 2 million managed with 
Fulcrum KnowledgeServer from Hum- 
mingbird Ltd. in Toronto and millions 
more that it accesses using specialized 
litigation software. The firm’s database 
includes files saved as Word and Word- 
Perfect documents, as well as PDFs. 
The firm also has content in its propri- 
etary CRM database and in documents 
in still more formats received from 
clients and litigation opponents. Since 
the attorneys need to do word-proximi- 
ty searches, the index re- 

quired by the search en- 
gine adds 60% to the to- ' 
tal document store size, . 
says Keith Berkland, the 

firm’s application devel- AN 
opment manager. 

After the initial spider- 
ing and indexing, search 
engines use various tech- 
niques to determine a 
document’s relevance 
(see box). 

“The first generation of 
search engines is about 
the mechanics of getting 
a lot of stuff into the in- 
dex,” says Ramos. “The 
second is, How do I un- 
derstand what the users’ intentions are 
and more proactively deliver content 
they are looking for?” 

“The main problem we were run- 
ning into was the relevance of search 
results,” says Brad Hochhalter, director 
of the Permanente Knowledge Con- 
nection, the clinical library site of 
Kaiser Permanente Health Plan Inc. in 
Oakland, Calif. “With medical knowl- 
edge, there is a lot of ambiguity for 
what terms mean and a lot of syn- 
onyms, so it is difficult to quickly bring 
up relevant material for the clinicians.” 

The site provides the health mainte- 
nance organization’s 11,000 physicians 


and 50,000 support staffers with access 


to nearly 40,000 internal documents, the 
content of more than 170 medical jour- 
nals, plus textbooks and other content. 
Hochhalter says search software 
from Verity Inc. in Sunnyvale, Calif., 


50% OF THEIR 
TIME SEARCHING F) 


BOB DOWNING, MANAGER 
OF BUSINESS SYSTEMS, 
ANADARKO PETROLEUM CO. 


TECHNOLOGY 


was returning unsatisfactory results, 
and users were abandoning searches. 

“We could tweak the algorithms 
with the Verity engine, but it becomes 
a crapshoot deciding which things to 
weight,” he says, adding that tuning the 
engine “was very time-consuming and 
labor-intensive for us.” 

To improve the results, Kaiser spent 
$28,000 to buy a search appliance from 
Google Inc. in Mountain View, Calif. 
The HMO installed the box in a rack at 
its secure data center in Corona, Calif. 
Hochhalter says installing the box re- 
quired hooking up two cables and 
plugging them in. One staffer set up 
the basic search functions and tweaked 
the results over a few weeks. 

The appliance soon produced signif- 
icantly better results, but it does have 
one drawback: The Verity engine lets 
Kaiser set up external metadata to 
describe a document, whereas Google 
requires that metadata be embedded 
within each document. With Verity, 
Hochhalter can add metadata without 
opening every document. 
Verity remains the corpo- 
rate standard, but 
Hochhalter says Google 
is still the better choice 
for searching through 
clinical library papers. 

Another option for 
finding the right informa- 
tion is to use a natural- 
language search engine, 
which lets users ask 
questions rather than 
search for keywords. San 
Diego-based LPL Finan- 
cial Services (Linsco/Pri- 
vate Ledger Corp.) uses a 
natural-language search 
engine from iPhrase 
Technologies Inc. in Cambridge, 
Mass., to deliver portal content to its 
4,300 agents in 2,100 branch offices 
nationwide. The product delivered 
60% relevant results out of the box, 
but LPL spent several months in- 
putting company-specific terms and 
tuning the results, boosting the rele- 
vancy rate to 80%. 

“Our goal in putting the tool on the 
| portal was to deflect some of the calls 
that were coming into the call center 
over to the Web site,” says Rochelle 
Putnam, senior vice president for LPL’s 
service center. “But we are also finding 
that internal staff are using it to im- 
prove their consistency in handling 
queries and spend less time calling su- 
pervisors to get the answers.” 

In addition to providing faster ac- 








cess to the existing content on the por- 
| tal, LPL staffers use iPhrase to improve 





TECHNIQUES FOR 
TUNING SEARCHES 


Here are seven ways to 
improve search-result relevancy: 


“DISAMBIGUITIZATION.” A single word 
can have many meanings, so the ESE 
must be able to distinguish between them. 
if the person searches for the word plane, 
is he looking for an airplane design or a 
tool to smooth wood? 


8 


MORPHOLOGY. The search engine must 
understand how a word is used in the 
query sentence. It must be able to discern 
the difference between “when leaves fall” 
and “when he leaves this fall.” 


8 


SYNONYMS. When searching the word 
plane, the ESE should recognize that 
documents containing words such as jet, 
airplane and 747 may also be relevant. 


0 


VOTING. Many search engines include a 
feedback mechanism that improves 
searches by letting users rank the useful- 
ness of the results. 


6 


HUMAN REVIEW. Search engines can be 
tuned to the user organization's business 
needs by reviewing search results and ad- 
justing them to improve relevance. 


oO 


CONTEXT AWARENESS. The ESE may 
analyze the type of user and application at 
the time of the search. In a criminal data- 
base, for example, searching the word 
flight might first bring up people who 
jumped bail, whereas the same search in 
a corporate travel database would pull up 
airline schedules. 


PERSONALIZATION. The ESE might 
weight results based on assigned or sur- 
vey preferences for individuals or work- 
groups or by learning preferences over 
time based on the types of answers the 
person clicks on in response to a query. 





www.computerworld.com 


that content. Putnam says they can 
view the questions brokers ask on a 
daily basis and see if the site has the 
content they need. If not, they can cre- 
ate content and ad4d it to the site. 

“We take those queries and throw 
them at the search tool and see what it 
returns,” Putnam explains. “This helps 
us tune the content and will enable us 
to drive some of the content develop- 
ment.” LPL also uses queries to ensure 
that the FAQ page contains the an- 
swers to the questions that are asked 
most frequently. 


Searching for ROI 


Justifying an ESE purchase requires 
showing productivity improvements, 
but that can be hard to calculate when 
the savings are measured in minutes or 
seconds saved here and there through- 
out the day. “The return is very specif- 
ic to the individual business needs, and 
there is no measurement that works 
globally,” says Giga’s Ramos. 

Downing was able to justify the cost 
of Anadarko’s system by demonstrat- 
ing huge time savings in its engineer- 
ing department. The company also 
saved 700 man-hours recently when 
searching through 10 years of e-mail 
records to produce evidence in a legal 
matter. LPL measures the return on in- 
vestment by calculating the reduction 
in calls coming into its service center. 
But for Kaiser and Dickstein Shapiro, 
the payoff comes from keeping their 
highly paid doctors and lawyers happy 
by helping them work faster. 

Although those results are largely 
anecdotal, Kaiser’s Hochhalter says he 
does have one measure of savings. 
“The main ROI is that I have a high- 
functioning search engine and I am 
spending one-fifth of what I was 
spending before. Now I can put those 
IT doilars somewhere else,” he says. 

Ultimately, ESEs have the biggest re- 
turn where users are well educated — 
doctors, attorneys, brokers, engineers 
— and where a large number of docu- 
ments must be searched regularly. In 
organizations with fewer documents 
and lower skill levels, analysts say the 
search engines or directories that 
come with operating systems and ap- 
plications may be good enough. D 
Robb is a freelance writer in Tujunga, 
Calif. Contact him at drewrobb@ 
attbi.com. 





EMBED INSTEAD 


A search tool embedded in the Ford Learning Network 
portal matches courseware to employee needs: 


QuickLink 37472 
www.computerworld.com 





If you’re busy monitori 
who's watching yo 


The new HP Proliant DL740 
8-way with hot-plug 
RAID memory. 


- Ultradense 4u modular chassis 
with up to eight Intel® Xeon™ MP 
1.5 GHz or 2.0 GHz processors 

- Up to 64GB addressable memory 

- Groundbreaking F8 chipset 

- 6-64 bit/100 MHz PCI-X slots 

- Integrated Lights-Out Standard 
(iLO) for Remote Server Mgmt. 


The new HP ProLiant DL760 
G2 8-way with hot-plug 
RAID memory. 


- Up to eight Intel” Xeon™ MP 
1.5 GHz or 2.0 GHz processors 
- Up to 64GB addressable memory 
- Groundbreaking F8 chipset 
+ 10-64 bit/100 MHz PCI-X, 
1-64 bit 33 MHz slots 
- Remote Insight Lights-Out Edition Il 
(optional) for Remote Server Mgmt. 


What challenges do you face today? Decreasing budgets? The 
lurking possibility of downtime? It’s hard enough to focus or 
moving your business forward when you're constantly looking 
over your shoulder to see if everything is up and running 


Besides, that’s the job of the new HP ProLiant DL700 series 
running Intel® Xeon™ MP processors. An adaptive infrastructure 
begins with these HP ProLiant servers which come equipped 
with tools that predict, self-diagnose and fix many fault 
conditions. And now with hot-plug RAID memory exclusively 
from HP. you can add or replace DIMMs without turning 
your systems off. Both work with the HP ProLiant Essentials 
Foundation Pack featuring Insight Manager 7 software which 
monitors and controls your infrastructure for maximum uptime 


At the end of the day, you'll have more control over your 

infrastructure, help avoid unplanned downtime and reduce 
overall maintenance costs. Not to mention freeing yourself 

up for more important things 


To learn how HP ProLiant servers can be a 
part of maximizing your company’s uptime, 
download CMP’s executive brief on high availability 
at www.hp.com/go/proliant85 or call 
1-800-282-6672, option 5, and mention code YPH. 
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Outlook: Promised advan- 
tages of 802.11g wireless 
LAN devices won't make 
a lick of difference in most 
companies, but you'll 
probably end up buying it 
anyway. Here’s why. 

By Robert L. Mitchell 


D-Link’s 
DWL-7000AP 
a/b/g access 
point sells 

for $279. 


Of 


O THE UNINITIATED, the evolution of 
wireless LAN standards might look 
like an alphabetic soap opera. PC 


the lIMbit/sec. 802.11b WLAN stan- 

dard were just moving into the main- 

stream last year when vendors intro- 
duced the 54Mbit/sec. technology known as 
802.lla. Now vendors are offering a third alterna- 
tive, 802.llg, which they claim delivers 802.lla 
speeds over longer distances, while 
supporting backward compatibility for 
802.l1b devices — something 802.lla 
technology failed to do. 

But don’t rip out that lb infrastruc- 

ture, users and analysts say. PC cards 


provide few real-world benefits today. By this 
time next year, though, you'll probably end up 
buying it anyway because the technology will be 
built into most hubs, or access points. 

The benefits of 802.llg derive from the limita- 
tions of its two predecessors. Released first, 
802.llb uses a transmission technology called di- 
rect sequence spread spectrum, or DSSS. Each ac- 
cess point supports up to lIMbit/sec. over three 
| channels in the 2.4-GHz frequency range (see 





@ PRODUCTS 


Vendors Offer 
™~ G ina Flash 


Devices based on 802.11a got 
off to a slow start last 
year, in part because only 
one vendor offered a chip 
set and the Wi-Fi Alliance 

wouldn't certify Atheros 
Communications’ design 
until a competing design was 
available to test against. This time around, 
Atheros’ AR5001X faces competition from Broadcom 
Corp.'s 54g and Intersil Corp.'s Prism GT chip sets, with addi- 
tional designs from Cisco Systems Inc. and Intel Corp. in the 


~ 
~ 


cards and access point hubs based on | 


EMERGING 2° 
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and access points using llg are still immature and eas with a high density of users or for applications 
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table). But the technology has a few drawbacks. 
Having only three channels increases the like- 
lihood of cochannel interference between neigh- 
boring access points. And, as with all WLAN tech- 
nologies, actual throughput is at best only about 
half the published data rate and drops as distance 
and the number of users per access point increase. 
WLANs also face interference from microwaves, 
mobile phones, Bluetooth devices and even Pen- 
tium processors operating in the relatively crowd- 
ed 2.4-GHz band. 

With its higher bandwidth (best 
case of about 26Mbit/sec.) and up to 13 
channels (with ll more likely to gain 
regulatory approval in the next two 
years), 802.lla is a better choice for ar- 


that require higher data rates. It operates in the 
less crowded 5.2-GHz frequency band, but it has a 
shorter range, and its modulation technique, called 
orthogonal frequency division multiplexing, or 
OFDM, won’t support 802.11b devices. To support 
both lla and lig client types, corporations must 
buy more expensive, dual-mode access points. 

As for 802.llg, it addresses the backward-com- 
patibility issue — sort of. It adapts OFDM to allow 
54Mbit/sec. operation in 802.1lb’s 2.4-GHz band, 


: works. Early products are already in retail stores. 


Most 802.11g access points and cards now shipping suf- 


: fer from two big drawbacks: They're typically consumer- 

> grade devices that lack enterprise-class manageability fea- 
: tures, and all are based on a draft specification that will re- 
: quire device driver, firmware and/or flash memory updates 
: when the final specification is ratified - and that won't hap- 
> pen before the summer. “We're probably looking at July,” 

> says Brian Grimm, a spokesman for the Wi-Fi Alliance. His 
* group will begin testing products shortly thereafter, but the 
: first products carrying Wi-Fi interoperability certifications 

: aren't likely to arrive much before late summer. 


Devices based on 802.11g sell for a premium of 50% or 


: more over 802.11b devices, but vendors say that should drop 
: to 10% or less by next year as shipment volumes increase. 

: Early 802.11g cards and dual-mode 802.11a/g hubs are avail- 
> able from D-Link Systems Inc., Linksys Group Inc. and sev- 
: eral others, but vendors of enterprise-class WLAN equip- 

: ment are holding off until the 802.11g standard is final. In 


: some cases, existing enterprise-class access points have 
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*802.1ig hubs supporting 802.11b clients must run in protected mode, which can cut throughput by as much as 40%, 


according to Atheros Communications. 
**Number of nonoverlapping channels supported. 


***Both 802.11a and b specs were approved at the same time, but because of the complexity of 802.1la, b products shipped 
first. Volume shipments of 802.11a products didn’t begin until 2002. 


while supporting 802.1lb devices. “It gives you three 
more channels of 802.lla,” says Rich Redelfs, vice 
chairman of WLAN chip-set maker Atheros Commu- 
nications Inc. in Sunnyvale, Calif. But does that mat- 
ter? Probably not, he says, because most corporate 
uses don’t yet require the bandwidth. 

“We're having this technology burst that is deliver- 
ing technologies in excess of demand,” says Ken Du- 
laney, an analyst at Gartner Inc. That’s certainly the 
case at Embarcadero Systems Corp. in Alameda, 
Calif., which uses pole-mounted 802.11b access 
points on its loading docks. “Range matters, while 
our bandwidth requirements are not high,” says 
Chief Technology Officer John Montgomery. 


been designed to be upgradable as organizations move be- 
yond 802.11b. Proxim Corp. says it will release an 802.11g 
version of its Orinoco AP-600 small-business access point, 
along with an upgrade kit for its AP-2000 enterprise-class 
devices and 802.1ig client card in the second quarter. A 
Cisco spokesman says the vendor will ship upgrade kits for 
its Aironet 1100 and 1200 access points “shortly after the 
Tig standard is finalized.” Ron Seide, product line manager 
of Cisco's wireless networking business unit, won't say 
when the vendor will ship a/g access points and WLAN 
cards; Gartner analyst Ken Dulaney expects mature prod- 
ucts to arrive by late 2003 or early 2004. 

Holtsville, N.Y.-based Symbol Technologies Inc., which 
sells heavy-duty WLAN devices used in warehouses and 
delivery trucks, is even more cautious. Symbol Vice Presi- 
dent Ray Martino says the vendor won't ship products until 
early to mid-2004, with PDA client support coming some- 
time thereafter. “Going forward, especially with those enter- 
prises which are deploying wireless for the first time, g may 
have some promise for higher-bandwidth applications.” 





Montgomery says that in a few areas in the yard 
where workers tend to congregate, having higher 
bandwidth might be beneficial. The 802.llg standard 
promises higher bandwidth than lb, with comparable 
range. But with current llg devices based on a draft 
specification and lacking Wi-Fi Alliance interoper- 
ability certification, the decision was a no-brainer: 
“We will pass on [802.1lg] and use 802.1la,” he says. 

“If you’re trying to put these in an indoor office 
space, range is not an issue,” says Redelfs. Network 
administrators need to maximize bandwidth for each 
user. One way to do this is to place access points 
closer together, but that increases the likelihood of 
cochannel interference, he says. The best solution for 
802.llb users in this situation is to move to 802.lla/b 
hubs. “The beauty of 802.lla is you have so many 
channels you don’t have to worry about interference 
between access points,” he says. Another option for 
802.lla devices is to “dial down the power” in order 
to more closely group access points, he says. The 
IEEE is working on a standard, 802.11h, that will sup- 
port adjusting 802.lla power levels and changing 
channels on the fly to avoid interference with other 
access points and devices operating in the 5-GHz 
range, such as radar. But that standard, also called 
Spectrum Managed 802.1la, is still in committee. 

One area where 802.llg could eventually shine is 
streaming video, says Dulaney. But acceptable quali- 
ty will require solidification of the emerging 802.lle 
quality-of-service draft standard, which has pro- 
gressed slowly in committee. And while video 
streaming over a WLAN connection may work for 
home users, today’s throughput rates still may not be 
enough to support it in a business environment, 
where many users share an access point, he says. 

For now, Dulaney says, corporate IT shouldn’t get 
too far ahead of the curve. “Buy b now and then switch 
over to buying a/g at the end of the year,” he says. D 
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@ COMPATIBILITY 


Why Faster G 
Means Slower B 


Got 802.11b? If so, installing 802.11a/g access 
points will actually slow throughput rates for exist- 
ing clients and throttle back the performance of 
newer 802.11g clients as well, vendors and ana- 
lysts say. How big an impact will this have at the 
individual client level? The final answer won't 
come until sometime in 2004, once more mature, 
second-generation devices arrive and enterprises 
begin field-testing products. 

The performance issue arises from the way in 
which the 802.11g standard provides for backward 
compatibility with 802.11b devices. While 802.1ig 
access points can communicate with both client 
types over the same frequency band, each uses a 
different communication protocol. Since a and b 
devices can’t see each other, the default collision- 
avoidance scheme for managing who gets to talk 
doesn't work. To solve that, 802.119 access points 
supporting mixed clients go into “protected mode” 
and coordinate traffic using a request-based proto- 
col that adds to network overhead. “You're running 
two different protocois and time-sharing them,” 
says Atheros Vice Chairman Richard Redelfs 

The design favors 802.11q clients, but through- 
put for both clients is degraded, he says. “We get 
frustrated when people say g is backward compat- 
ible and as fast as a. If you want to be backward 
compatible, you're not as fast as a,” he says. 

Vendor tests of protected-mode performance 
vary. Tests by Intersil Corp. and Atheros show that 
rate declines could be 40% or higher in some sit- 
uations. But those aren't real-world tests. Gartner 
analyst Ken Dulaney expects the degradation of 
throughput to the client in the range of 10%. “You 
will slow it down a little bit,” he says, adding that 
he doesn't think most users will notice. “The bot- 
tom line is it doesn’t matter,” he says, because 
most clients aren't constricted by bandwidth. 

Redelfs is less optimistic. “If you're concerned 
about bandwidth [for 1b users], you're much bet- 
ter putting an a/b access point up, because you 
won't touch the b users at all,” he says. Alternately, 
users can force access points to run in 1lg mode 
only. That's technically out of specification and 
leaves no arbitration for b and g nodes, so collisions 
will increase with network traffic loads. But devices 
will probably still be interoperable, Redelfs says. 

The throughput limitations of protected mode 
are also likely to decrease as more mature designs 
appear, Redelfs claims. Initial 802.71a chip sets, for 
example, fell short of expectations. Second-gener- 
ation designs have fared better. “We've dramati- 
cally improved the range and throughput of a,” he 
says. He expects similar gains in future 802.11g 
designs. “There are still huge advances we can 
make in range and throughput,” he adds. 
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PeopleSoft’s chief manufacturing industry 
strategist tells why her company has bet ona 
_ pure Internet architecture. By Tommy Peterson 





CAROL PTAK is in the thick of PeopleSoft 
Inc.’s efforts to transform itself from, 
as she puts it, “that HR company that, 
oh, by the way, does some supply 
chain” to a major player in ERP and analytics soft- 
ware. Ptak learned manufacturing from the ground up, 
starting out as an assembler on a plant floor. From 
there, she went on to plant management and then es- 
tablished her own consulting firm before joining IBM’s 
worldwide ERP solutions group. In addition, in 2000, 
Ptak served as president and CEO of APICS — The 
Educational Society for Resource Management. She 
joined Pleasanton, Calif.-based PeopleSoft last year 
and now has worldwide responsibility for the com- 
pany’s manufacturing industry strategy across its 
entire product line. 

Ptak recently spoke with Computerworld’s Tommy 
Peterson about how her company and others are re- 
sponding to customers’ needs. 


Q&A 


What sorts of technological issues do you see PeopleSoft 
having to address? I see it from two sides: There’s what 
customers tell us they need, and then there’s the flip 
side. Take the example of Post-it notes — which is, 
until it comes out, customers don’t know they need 
it. Post-it notes were really a disruptive change, 
albeit not something that changed the world. But 
still, they weren’t something that somebody went 
to 3M and said, “You know, we really need a little 
piece of paper that’s got glue on the back that sticks 
but doesn’t stick.” But after 3M developed it, every- 
body went, “Oh, gotta have that.” 

So the job is really twofold — first, listening to 
what customers are saying and translating that into 
changes. The other half is looking at what we've got 
and helping our customers understand what’s there. 


So, what are users saying they need right now? People are 
going for anything that will increase revenues or de- 
crease costs with some level of surety that that’s going 





to happen in the very short term. It’s [which] technol- 


ogy is going to address a real business issue for them. 


Users don’t think of the kind of big systems that PeopleSoft 
and its competitors sell as quick fixes. It depends on the 
size of the company. What I’m seeing is that the big 
companies out there are buying point solutions. 
They’re buying something that fixes a very finite 
scope of issues they have in the company. The small- 
er companies, the under $2 billion companies, are 
looking for full-suite integration projects, but they’re 
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She started a consulting firm, Ea- 
gle Enterprises, and then joined 
IBM’s ERP solutions group. Ptak 
is also a past president and CEO 
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consortium for manufacturers. 
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looking for them to be completed in under a year. The 
expectations are of time to implementation of six to 
nine months. So it’s a big project for that company, 
but it’s also very quick. The old 18- to 24-month proj- 
ect times just don’t hold anymore. They need to have 
whatever it is you’re going to do up, running and pro- 
ducing the return on investment within a year. 


Was that a tough transition for PeopleSoft to make? No, 
actually. Our architecture allows you to deploy more 
quickly than our competition, because it’s a pure In- 
ternet architecture. I was with a customer recently 
that was looking to outsource some of their manufac- 
turing to Mexico. One of the things that really res- 
onated with them was that because of our pure Inter- 
net architecture, if something happened in Mexico, 
they didn’t have to send a tech across the border in 
order to fix something that’s running on the client 
machine. All you need is a browser. With the security 
issues in going across the border, if a tech has to go 
over there on what’s a 20-minute job, he’s going to be 
gone all day. So that was a big savings for them right 
there; it was a big determinant of how much tech sup- 
port they were going to have to add. Folks recognize 
that the Internet is the future, and I believe we’re the 
only ones that have a pure Internet architecture. 


What kinds of advantages do you see as inherent in an Inter- 
net-based architecture? First, there’s a big difference 
between Internet-enabled and pure Internet architec- 
ture. Pure Internet architecture means that this tech- 
nology was designed from scratch to run over the In- 
ternet. There is absolutely no code on the client. 

Think about what’s happening in the industry today 
and how companies have to collaborate much more 
closely with their customers. They need to get infor- 
mation out to their customers and do it in such a way 
that it’s very easy and inexpensive for the customer to 
receive that information. What's easier than giving 
somebody a user ID and a password for a Web site? 
There’s no integration and training of the supplier. 

When our customers say they are Internet-en- 
abled, it means that you’re having to download code; 
it means thicker clients. For our customers, you look 
at the number of PCs that you would have to up- 
grade. And they ask, “How big of a client do I need to 
run the code?” With ours, you only need a browser. If 
you've got older machines, we say great — you don’t 
even have to upgrade all those machines. All you 
need is a browser. 


What does the real-time enterprise mean to your company 
and your customers? We see real time as meaning that 
there is no time lag between an event and the impli- 
cation of the event. I need to know as soon as some- 
thing happens in my supply chain that I’ve got a 
problem. I need to know right away when I have an 
opportunity with a customer. 


What's the capability for the real-time enterprise right now? 
It varies. It always gets down to how many integra- 


tion points are there at 
MORE FROM PTAK 


the customer site and 
how often do they want PeopleSoft's Carol Ptak elaborates 
on the shifting technology markets: 
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The Web’ 
Next Leap 


Data integration viathe Semantic | 


Web. By Patrick Thibodeau 


NFORMATION TECHNOLOGY man- 

agers are familiar with the concept 

of the Semantic Web, even if they 

haven't heard the name before. 

The Semantic Web is about giving 
users the ability to manipulate, con- 
nect and associate Web resources in 
new and powerful ways. It’s a 
capability similar to that of the 
corporate workhorse, the rela- 
tional database. 

The Semantic Web is about 
taking the relational database 
and “webbing it,” as Tim Berners-Lee, 
the inventor of the World Wide Web, 
described it at a recent forum of the 
National Science Foundation in Arling- 
ton, Va. The Semantic Web will allow 
businesses to manipulate external, 
heterogeneous Web data in much the 
same way they do internally, he says. 
But its most immediate use may be as a 
tool to solve data integration problems. 

The Semantic Web is intended to in- 
fuse meaning into the Web and make 
data “machine-understandable.” It re- 
lies on the development of standards 
and “ontologies,” the vocabularies that 
systems need in order to associate and 
connect data across multiple databas- 
es. These ontologies would be linked 
to documents and other Web resources, 
giving computers the ability to infer 
relationships among these informa- 
tion sources. 

The Semantic Web would allow 
manipulation across multiple, hetero- 
geneous databases. This capability 
could, for instance, allow an electronic 
airline reservation service to automati- 
cally interact with a personal calendar 
program to arrange a flight that fits a 
user’s schedule, even if there was no 
pre-established interface between the 
two pieces of software. 


FUTURE. 
WATCH 





But accurately forecasting the kinds 
of services that the Semantic Web will 
deliver is as difficult as it was to antici- 
pate at its inception what the Web 
might become. “In the beginning, I 
think it was very unclear what the 
dominant business model would be,” 
says Ora Lassila, a research fel- 
low at Espoo, Finland-based 
Nokia Corp.’s Nokia Research 
Center. Similarly, the kinds of 
services that may emerge from 
the Semantic Web remain a 
“big question,” he says. 

But for corporations, the immediate 
value of the Semantic Web may not 
rest in using it for new services, but 
rather as a means of integrating data in 
heterogeneous environments. And the 
concepts and standards are sufficiently 
developed to allow that now. 





Eric Miller, who heads the World 
Wide Web Consortium’s (W3C) Se- 
mantic Web effort, believes it’s the 
Holy Grail of enterprise integration. 
“We're talking about really reducing 
the turnaround time of data integra- 
tion,” he said. 

The Cambridge, Mass.-based 
W3C, which is headed by Berners- 
Lee, is leading the effort to develop 
Semantic Web standards, such as the 
Resource Description Framework 
(RDF), the standard used for express- 
ing ontologies, and XML, the standard 
for creating customized tags for the 
exchange of data between heteroge- 
neous applications. 


Ontology Hurdle 

A more difficult aspect of building the 
Semantic Web is the creation of on- 
tologies. This process requires efforts 
by diverse communities, such as the 
medical, insurance and finance indus- 
tries, to develop common vocabularies 
that systems will use to recognize 
what’s in a Web document. 

Fortunately, creating ontologies 
doesn’t require a global coordinated 
effort. If words are used differently, 
such as “title” in insurance vs. the 
“title” of a book, services will be 
able to map those differences to allow 
interoperability. 

“The Semantic Web is very mucha 
future-looking vision,” says Ronald 
Schmelzer, an analyst at ZapThink LLC 
in Waltham, Mass. “Trying to get com- 


| puter systems to not only be able to 


communicate with each other, but also 

able to understand each other is tradi- 

tionally a very difficult problem.” 
Indeed, developing the Semantic 


says the Semantic Web will let businesses manipulate external data. 
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Web will take years, says Jas Dhillon, 
president and CEO of Celcorp Inc., a 
start-up company in Santa Monica, 
Calif., that has used RDF and ontolo- 
gies to integrate applications. 

“The Web is kind of stuck in terms 
of where it is right now, and if it is 
going to take the next step and en- 
hance productivity and use, it has 
to become intelligent,” Dhillon says. 
“We are betting that Tim Berners-Lee 
will succeed.” 

And if Berners-Lee does succeed 
in convincing software vendors to in- 
vest in Semantic Web applications, 
businesses will have a new way of inte- 
grating databases and applications, in- 
stead of using the traditional method 
of building interfaces one by one. 

Celcorp uses ontologies built on top 
of RDF in its “semantic learner,” which 
can create new “meta-applications” by 
extracting features from multiple exist- 
ing applications. It analyzes what users 
are doing in the existing programs, how 
they navigate, what actions are taken 
and what data is used. It then puts that 
information in a knowledge base. 

In the next step, a “reasoning en- 
gine” builds the new application. It 
does that by allowing users to specify 
goals or results they want to accom- 
plish. Using RDF, the reasoning engine 
looks across the knowledge base to see 
if all the pieces are there to assemble 
the process. 

In the third step, code is generated 
and executed based on the functions 
stored in the knowledge base. 

Semantic Web proponents predict 
that more companies like Celcorp will 
emerge in the near term, offering simi- 
lar services and new tools for applying 
semantic concepts to existing business 
processes. 

Berners-Lee says technology man- 
agers can prepare for this future 
by asking their application vendors 
whether they’re using RDF in their 
software development. D 





www.computerworld.com 


TECHNOLOGY 


COMPUTERWORLD April 21, 2003 35 








The Battle Against 


Pornography Continues 


Atest of a British vendor’s e-mail filtering 
tool proves to be surprisingly successful. 


By Vince Tuesday 


UR SECURITY TEAM'S 
goal is to provide the 
company with freedom 
from fear. Manage- 
ment is afraid of pornography, 
afraid of the bandwidth and 
time wasted on it, and even 
more afraid of lawsuits from 
offended staff. I don’t think 
the problem within our com- 
pany is particularly bad, but 
because we take every 
issue seriously, we’ve 
spent some time ad- 
dressing this. 

I see four ways for 
pornography to get 
into or out of our 
building: on physical 
media, over Web connections, 
by way of e-mail attachments 
and over peer-to-peer file- 
sharing networks. 

We do our best to ban peer- 
to-peer networks. But there’s 
not a lot we can do about phys- 
ical transport, considering the 
latest solid-state storage de- 
vices are the size of my thumb. 
But if anyone copies porn from 
such a device onto a PC, we'll 
find it eventually on the file 
shares or local drives. 

We also do reporting on 
Web browsing activity. That 
has allowed us to track down 
the small number of people 
who view and download 
pornography over the Web. 

That leaves e-mail as the 
last open door. We’ve added 
a few filters for particularly 
dreadful phrases to try to stop 
offensive spam, and our new 
antispam service should help 
filter out porn too. But there’s 
always the risk that the e-mail 
service will be used to send 
and receive objectionable 
material, particularly in file 
attachments. 


JOURNAL & 





We'd like to find a way to 
block incoming e-mails that 
include pornographic image 
file attachments. We already 
use New York-based Message- 
Labs Inc.’s SkyScan antispam 
and antivirus services, and the 
managed service provider of- 
fers a service it claims can also 
protect us against pornograph- 
ic pictures. But it has been dif- 
ficult to arrange a 
test of that service. 

Based on informa- 
tion on Message- 
Labs’ Web site, it ap- 
pears that the com- 
pany uses First 4 In- 
ternet Ltd.’s Image 
Composition Analysis (ICA) 
software to perform this ser- 
vice. By chance, we were re- 
cently approached by a re- 
seller of Banbury, England- 
based First 4’s product. 

I have a cynical view of the 


| likely effectiveness of these 


tools. It’s difficult enough for 
humans to decide about porn- 
ographic images, so it must be 
extremely hard for software to 
do it. This reseller, however, 
was willing to let us try ICA 
on our systems for 10 days. 

It also offered us five CD- 
ROMs full of images to help us 
test the software. They con- 


It’s difficult enough 
for humans to decide 
about pornographic 
images, so it must be 
extremely hard for 
software to do it. 





tained images that included no 


} porn, some porn, a whole lot 


of porn and total porn. One 
CD the reseller offered con- 
tained images graphic enough 
to frighten Larry Flynt. 

The graphic nature of the 
material aside, it isn’t a good 
idea to test a product by using 
the vendor’s test data. Even if 
it goes well, you can’t trust the 
results. So I politely declined 
the offer of free porn on CD. 

Instead, we ran the tool 
against a week’s worth of 
saved e-mail attachments — 
more than 6,000 of them — 
received by employees at our 
company. It took a few hours 


| to process but required, on 


average, less than one second 
per attachment when run on 
a low-end desktop machine. 


Avoiding False Positives 


| We aren’t too bothered by 


false negatives, where the soft- 
ware misses image files that 
should be flagged as porn. Our 
intent is to catch persistent of- 
fenders, so even a 50% hit rate 
will work. But we’re very keen 
to have a low false-positive 
rate. We can’t risk falsely ac- 
cusing innocent staffers, so 
unless this software is very 
accurate, we'll have to check 
everything it flags. 

When we performed our 
test, the software identified 
about 100 questionable images, 
only nine of which were legiti- 
mate e-mails that had been 
misclassified. Given that this 
was incoming e-mail from the 
Internet, and considering the 
high volume of attachments 
we get, it wasn’t that bad a 
number of offensive e-mails. 

Most false positives were for 
pictures of babies; these im- 
ages tend to have a lot of skin 
tones. There were a few very 
weird false positives. A picture 
of a sunset, for example, was 
apparently pornographic. But 





we can live with this error rate, 
particularly right out of the 
box. With a little tuning, the 
software should run well. 

And the false negatives? 
A manual search of the files 
classified as not pornographic 
revealed only a tiny number 
of offensive images, and most 
were montages of smaller im- 


| ages that the software under- 


standably had problems with. 


No Easy Solutions 


So, if you’re a porn hound and 
want to bypass this software, 
what can you do? Not a lot. It 
looks inside Word documents 
and PowerPoint files and will 
check compressed files as 
well. Colorblind offenders can 
rest easy, however, because 
the software can’t handle 
monochrome images. 

Overall, I was pleasantly 
surprised with how well the 
software worked. Our next 
step is to decide if we'll use 
the upstream filtering at Mes- 
sageLabs or install the soft- 
ware on our e-mail manage- 
ment servers. (We use MIME- 
sweeper, from Bellevue, Wash.- 
based Clearswift Ltd.) 

Whichever way we decide 
to go, it won't be long before 
our incoming and outgoing 
e-mail is being scanned by the 
perverted gaze of ICA. Even if 
we buy the service, though, I 
plan to purchase a copy of the 
software so we don’t have to 
manually trawl through hard- 
drive images during forensic 
investigations. D 


WHAT DO YOU THINK? 


This week's journal is written by a real 
security manager, “Vince Tuesday,” whose 
name and employer have been disguised 
for obvious reasons. Contact him at vince. 
tuesday@hushmail.com, or join the dis- 
cussion in our forum: 


QuickLink a1590 


To find a complete archive of our 
Security Manager's Journals, go online to 


@computerworld.com/secjournal 





SECURITY LOG 


Version 4.0 of Tripwire for 
Servers and Tripwire Manager. 


The top five industry sectors 
targeted by attackers in 
the first quarter of 2003 


(percentage of all attacks): 
Retail 


Financial services 


Federal andiocalgov't 1% 


SOURCE: INTERNET SECURITY 
SYSTEMS INC., ATLANTA, APRIL 2003 
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Maxtor ATA Drives 
Work on Intel Chips 


Maxtor Corp. announced last 
week that its Serial Advanced 
Technology Attachment (ATA) 
hard drives have passed lab test- 
ing for compatibility with Intel 
Corp.’s new 875P Serial ATA chip 
set with built-in RAID capabilities. 
According to Miipitas, Calif.- 
based Maxtor, the proven com- 
patibility provides a variety of op- 
tions for building PC, RAID and 
near-line storage arrays. 


Vendors Team on 
Disaster Recovery 


EMC Corp. in Hopkinton, Mass., 
Legato Systems Inc. in Mountain 
View, Calif., and Nortel Networks 
Ltd. in Brampton, Ontario, last 
week announced a pretested dis- 
aster recovery/business continu- 
ity architecture that’s designed 
to connect multiple data centers 
and automatically reroute trans- 
actions to alternative sites, with 
no need for manual restore or 
resiart procedures. The pretested 
technology includes EMC’s Sym- 
metrix and Ciariion arrays, EMC’s 
Symmetrix Remote Data Facility, 
Legato’s Automated Availability 
Manager software and Nortel’s 
OPTera Metro 5200 Multiservice 
Platform. 


Supermarket Uses 
Elogex for Logistics 


Publix Super Markets Inc. has 
signed a multiyear contract to use 
Charlotte, N.C.-based Elogex 
Inc.’s OneNetwork system. Lake- 
land, Fla.-based Publix will use 
the system across its distribution 
network to link its operations with 
carriers and manufacturers on a 
unified platform. The technology 
will provide load tendering, online 
appointment scheduling, freight 
procurement and payment. Publix 
said the system will help it save 
money on transportation and 
avoid out-of-stock merchandise 
by helping the chain better man- 
age time-sensitive products, in- 
cluding perishables, promotional 
items and seasonal stock. 





TECHNOLOGY 


Gettin 
About 


HE ALMOST DEAFENING BUZZ these 
days around the “real-time enterprise” is 
drowning out important practical ques- 
tions about what the term real time really 
means and the nature of real time’s impact 


on business processes. 


For example, a few weeks 
ago, I heard from Scott 
Hicar, the CIO at consumer 
electronics company Maxtor 
Corp. His company has been 
using Data Integrator soft- 
ware from Business Objects 
to pull data from its various 
applications into an Oracle 
data warehouse. Maxtor ex- 
ecutives were then pulling 
real-time reports from the 
data warehouse using Busi- 
ness Objects’ WebIntelli- 
gence — at least that’s what 
they were doing early in the 
implementation. 

The problem was that all those real- 
time reports were slightly different, 
since they had been produced at differ- 
ent times. So executives were spending 
a lot of their meeting time comparing 
reports and puzzling over data rather 
than making decisions, Hicar says. Once 
Maxtor recognized the root problem, 
the company easily solved it by tweak- 
ing the software so that it pushed re- 
ports to decision-makers at several set 
times throughout the day. 

“Now people spend time acting on the 
information rather than questioning its 
validity. That was our early learning 
about the nature of real time,” says 
Hicar. “Every business and business 
process has different criteria about how 
timely timely is.” 

Constantly updated, instantly avail- 
able information is unnecessary for 
some business functions — and some- 
times it can be downright detrimental. 
That’s because human decision-makers 
are still at the center of most business 
processes, and they need more than a 
stream of the most current data. 

Promoters of real time sometimes for- 


| choices when they have access to con- 
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Ins 


get that the notion had its 
beginnings in applications 
that were designed to elimi- 
nate the need for people to 
make decisions. Real time 
started out as a way to say 
that the response of the ap- 
plication to a particular 
event had to be both correct 
and timely, with timely usu- 
ally meaning a very short 
time constraint. Early real- 
time applications were 
mostly designed for auto- 
mated technologies like air- 
plane navigation systems 
and missile-guidance systems or devices 
such as cardiac pacemakers. 

The program controlling Uncle Ned’s 
pacemaker not only has to trigger the 
correct electrical impulse; it also has to 
trigger it within a very precise time 
frame, or Uncle Ned is in big trouble. 
Likewise, the guidance system in a Tom- 
ahawk missile must respond to devia- 
tions in the missile’s trajectory within a 
fraction of a second, or the corrections 
it makes will be useless to spare unin- 
tended targets. 


Helping People Do Their Jobs 


Clearly, some things can be done more 
effectively by computers than by people, 
and those tasks were the first prime tar- 
gets for real-time applications. And the 
faster the information flows through 
those applications, the better. 

But the IT systems in place at most 
companies are there to help people do 
their jobs, and people make better 





text and analysis, which are pretty tough 


to serve up instantly. 


The rise of increasingly more sophis- | 
ticated real-time analytical tools may 
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eal Time 


help, but there still remain the major 
issues of cost, data quality and the readi- 
ness of companies to make productive 
use of the analysis (see “Real-Time Data: 
Too Much of a Good Thing?” QuickLink 
36917). 

Smart technologists like Hicar know 
that their job isn’t implementing soft- 
ware that makes decisions, but rather 
it’s “presenting information to human 
experts to make decisions.” 

And those humans, expert or not, also 
create the cultures within organizations 
that will need to be changed to accom- 
modate real-time information exchange. 
The utopian vision of the nimble, collab- 
orative real-time enterprise with infor- 
mation flowing freely and at incredible 
speeds between departments is inspir- 
ing. But it ignores the work that needs to 
be done to tear down those walls and re- 
solve the ongoing turf wars in most 
companies. 

Gartner/G2 analyst Kraft Bell points 
out that the real-time enterprise is often 
mistaken for a business strategy, when it 
is in fact merely a “competency.” 

There’s no doubt that gaining that 
competence and having high-speed 
access to information can make a com- 
pany more competitive, as long as it 
chooses the appropriate spots to use 
real-time applications. Otherwise, it’s 
like buying a Lamborghini to get your- 
self to the local grocery store and back. 

As the economy has contracted, com- 
panies have felt the need for more visi- 
bility into their supply chains in order to 
decrease inventories, better track per- 
formance and sales opportunities, and 
have more information with which to 
make decisions. Implemented carefully, 
real-time applications can help with all 
of these business problems. 

The key is to avoid unrealistic expec- 
tations for real-time applications and to 
take time to prepare your infrastructure 
or organization for them. Otherwise, 
you’re just making it easier to make bad 
decisions more quickly. D 


WANT OUR OPINION? 


For more columns and links to our archives, go to 
www.computerworld.com/opinions 
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Companies have typically provided little Bt Facing the Unthinkable Trip ffshore 

information about former employees for Many companies prepare only for the kinds of | Consider the same potential conse- 

fear of being sued. But some hiring man- crises they’ve encountered in the past, not forthe | quences for offshore outsourcing as 
agers are finding ways to dig deeper into disasters that are likely to strike today, saysIanI. | you would for any outsourcing deci- 
the backgrounds of job candidates. Mitroff, who co-wrote a recent Harvard Business sion, warns columnist Bart Perkins. 

Page 39 Review article on the subject. Page 40 Page 42 


COST PRESSURES top just 
about every company’s list 
of reasons for sending 
greater amounts of IT work 
offshore. IT labor rates in 
India, the Philippines and elsewhere are as much as 
70% lower than those in the U.S. As such, they’re 
simply too compelling to ignore, IT executives say. 


But equally compelling is the potential of losing 


control over foreign technology workers and the 
quality of IT projects based thousands of miles away. 
Allstate Insurance Co., Avon Products Inc. and 
Global Exchange Services Inc. (GXS) are among a 
small group of U.S.-based Fortune 500 companies 
that have set up and staffed their own IT centers in 
lower-cost countries like India, Ireland, India and 


| Hungary to address the twin issues of cost and 


Slashing labor costs while retaining control control. ae sas 
In this offshore-insourcing model, foreign IT work- 


over IT staff and oes quality is ene | ee semanas out besa 
of offshore i insourcing. By Julia Kin y companies. They receive the same training, use the 


same software development tools and adhere to the 
} same business processes as their IT counterparts in 

’ the U.S. The big difference is that they’re paid a lot 
less. For example, for every $100 that GXS spends on 
an IT employee in the U.S., it spends just $30 on an 
employee in Bangalore, India, where it employs 230 
IT workers. “Manila is even less expensive — 
perhaps 30% to 40% less than India,” says Tasos 
Tsolakis, senior vice president of global technology 
at Gaithersburg, Md.-based GXS. 

By shifting about 70% of GXS’s internal IT projects 
and 40% of its IT work on customer-facing applica- 
tions to offshore centers, Tsolakis estimates that he 
has saved about $16 million a year for the past three 
years. At the same time, he says, GXS has been able to 
ensure quality and meet software delivery deadlines, 
because the offshore employees and projects are 
managed using the same Six Sigma processes that the 
company, a former business unit of General Electric 
Co., applies in the U.S. Among large U.S. companies, 
GE is one of the best-known proponents of Six Sigma 
quality-control processes. 


Consistency Across Continents 


“Clearly, the labor rate is the big driver [for hiring IT 
employees abroad], but you need to treat them like 
your regular [U.S-based] teams. Every development 
tool and testing tool I have here, my resources in 
Bangalore have. It’s critical that they feel a part of 
your team. They’re first-class citizens like everyone 
else is,” Tsolakis says, adding, “That’s how you can 
really create synergies and optimize resources.” 

The company’s 650 offshore IT employees work at 
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Allstate-set up IT operations in Northern Ireland because U.S. contractors “were constantly 
says Mike Scardino, a vice president at the insurance company. 


leaving for higher-paying jobs,” 


The Best of 
Both Shores 
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Allstate-owned facilities 
in Belfast and London- 
derry in Northern Ireland. 
The centers in those cities 
were set up in 1998 and 
1999, respectively, as a re- 
sult of the IT labor short- 
age in the U.S. caused 
largely by a crush of Y2k 
work and the then-thriv- 
ing dot-com economy. 

“We had an additional 
issue in that we had a 
large number of contrac- 
tors working for us here 
in Chicago and they were 
extremely expensive. 
With the labor crunch and 
Y2k, we had a ratio of 50% 
contractors who were 
constantly leaving for 
higher-paying jobs,” re- 
calls Mike Scardino, assis- 
tant vice president for 
finance at Allstate. 

Cost savings was one of 
the big advantages of 
hiring offshore employ- 
ees, and it remains so. 
Allstate spends about 75% 
less on contractors now than it did prior to setting up 
in Northern Ireland, Scardino says. 

The company is also retaining critical business 
knowledge and intellectual capital that used to walk 
out the door with departing IT contractors. “In the 
insurance business, there’s a tremendous amount of 
business knowledge that goes with programmers. 
You can’t just bring somebody in who knows Cobol,” 
Scardino says. “Now, the business knowledge stays 
with the employees. That’s a huge benefit and a big 
driver in terms of our ability to maintain our existing 
applications and to develop new ones, because they 
know what they’re talking about.” 


More Than Maintenance Work 

Both GXS and Allstate launched their offshore oper- 
ations with the intent of exporting primarily soft- 
ware maintenance work to foreign IT employees. But 
that soon changed. GXS’s IT employees in India, for 
example, now work mainly on Web-based transaction 
management services and other software tools that 
GXS offers to its 60,000 retail customers. In Banga- 
lore, staffers “don’t want to do just support work,” 
says Tsolakis. “You have to offer a continuous 
balance of work.” 

Scardino says Allstate’s Irish employees work on 
everything from software program maintenance to 
application development projects. “We started with 
the idea that it would primarily be maintenance, but 
with the skills and abilities of the workforce we 
hired, we’re able to do all different types of projects,” 
he says. “As we speak, I’m expanding beyond IT to 
call centers.” 

Keeping U.S.-based IT workers informed of the 
company’s plans for distributing various IT projects 
is a critical component of managing onshore/off- 
shore IT groups. “The U.S. teams ask, ‘What’s the fu- 
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= 650 cohen in Belfast and Londonderry, 
Northern Ireland. 

a IT work performed offshore includes software 
maintenance, new application development and 
call center operations. 
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Global Exchange Services Inc. 


Gaithersburg, Md 


dura, WV 
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Headquarters 


w 230 IT employees in Bangalore, india. Additional 
IT employee teams in Manila and Hong Kong. 

w Offshore IT projects include development of 
Web-based services and software tools for 
retail customers. 


wen enna tne. 
# 15-person Web sniata team i in Hungary. 
w Avon is considering hiring IT employees in 
Mexico and Argentina. 


ture for me, and why should I stay if you’re moving 

work offshore?’ ” says Tsolakis. “You need to give an 
overall direction and plan. It’s important to address 

this upfront. If you don’t do that, you end up losing 

some key resources that you don’t want to lose.” 

Scardino and Tsolakis also agree that on-site man- 
agement, preferably by a local national, works best at 
offshore regional IT centers. GXS’s Bangalore facility 
is managed by an Indian woman who reports directly 
to Tsolakis. “We have a whole infrastructure, includ- 
ing an HR person in Bangalore helping with recruit- 
ing and a finance person. This is because it’s impor- 
tant to mesh the local culture with the U.S. culture,” 
he says. 

For IT executives considering setting up and 
staffing an offshore IT center, Scardino advises that 
they first make “sure the economics of the local envi- 
ronment are sustainable, that there’s talent, that 
there’s a quality workforce and that those things 
aren’t going to change.” For all of these reasons, 
Northern Ireland was an ideal location for Allstate, 
Scardino says. 

“Part of the success of being in Northern Ireland is 
also because people [in the U.S.] are willing and able 
to go there. Routinely, we have people on the ground, 
and the people in Northern Ireland are over here,” he 
says. “There are travel costs, but relative to the eco- 
nomics, on a cost-per-hour basis, the travel budget is 
less than $1 an hour [per employee] when you spread 
it across all of our programs.” 

That’s one more item IT executives must add to 
their list of outsourcing considerations. D 


AROUND THE WORLD, BUT STILL IN-HOUSE 


Avon began its offshore insourcing initiative in Hungary. To learn more about 
how the company did it, visit our Web site: 


QuickLink 37761 
www.computerworld.com 
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NFORMATION TECHNOLOGY 
managers and CIOs say that 
more than ever, fear of liti- 
gation is preventing them 
from giving out much, if any, 
detail on former employees 
who require references in order 
to secure new jobs. For several 
years now, companies that are 
fearful of lawsuits and that have 
official corporate policies in 
place have typically provided as 
little information as possible. 
Recruiters and IT executives 
say it’s difficult to get more than 
the start date, the end date and 
possibly the employee’s title 
through official corporate chan- 
nels. Some employers have even 
automated the reference proc- 
ess, says Andy Baker, human re- 
sources manager for IT recruit- 
ing at Allstate Corp. in North- 
brook, Ill. “Certain companies 
make us dial a specific phone number and key in the 
person’s name or code number to gain the dates of 
employment and nothing else,” he says. 

Corporate policy is one thing, but harsh reality is 
another. Hiring managers today have pressing con- 
cerns — such as system security and the cost of re- 
placing less-than-stellar performers — that make it 
necessary for them to dig deeper for more informa- 
tion about prospective IT talent. 

Increasingly, IT executives and corporate HR de- 
partments are turning to alternate, unofficial chan- 
nels to screen the hundreds of thousands of IT work- 
ers who have been laid off nationwide and are avail- 
able for hire. Some use the old, informal insider’s 
network, chatting with folks at the job candidate’s 
last place of employment to find out more about 
what he was really like as an employee. 

Tasos Tsolakis, vice president of global technology 
operations at Global Exchange Services Inc. (GXS) in 
Gaithersburg, Md., says that when he needs to get the 
lowdown on a person he’s considering for a job, he 
calls someone at the company where that person 
works. “It’s pretty common for local IT managers to 
know other local IT people,” Tsolakis says. 

Other hiring managers use a combination of meth- 
ods, such as conducting several rounds of in-depth 
technical interviews and testing candidates for their 
technical skills. 
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“Delta Technology uses a multiple-hurdle hiring 
approach, including third-party background checks 


as well as traditional and skill-based interviews,” says | 


Curtis Robb, CIO at Delta Air Lines Inc. in Atlanta. 
“This allows us to view candidates from a broad per- 
spective, ensuring they possess the knowledge, skills 
and abilities required for the job.” 

Allstate receives an average of 600 electronic ré- 
sumeés a day, or up to 25,000 per month, and stores 
them in an internal, Web-based database. The compa- 
ny uses it to conduct searches using specific criteria, 
such as skills, programming languages and platform 
experience, to collect a manageable pool of job candi- 
dates. Human resources then 
e-mails to each candidate a cus- 
tomized employment application 
that’s designed to gather general 
information and specific experi- 
ence-related details. “Based on the 
response to the e-mailed form, we 
hone down our list to a few target- 
ed candidates,” Baker says. 

The next step is a phone inter- 
view to gather even more details, 
such as a candidate’s adaptability, 
teamwork capabilities and flexi- 
bility. When the number of candi- 
dates is down to two or three, 
Baker conducts on-site interviews 
and collects information that he 
then gives to a third-party back- 
ground-checking firm for verification of educational 
information and criminal history. “We also always 
ask permission from job seekers to check references 
in our online application,” he says. 


Outsource Your Screening 


Third-party reference-checking and online database 
companies are doing brisk business these days, col- 
lecting personal information and delivering it for a 
fee to corporate employers. Industry analysts say 
pre-employment screening, made easier and cheaper 
via the Web, has been on the rise for the past several 
years. Companies such as ChoicePoint Inc. in Al- 
pharetta, Ga., and The First American Corp. in Santa 
Ana, Calif., can verify identities and check details 
such as criminal records, automobile driving histo- 
ries, former addresses, education and previous em- 
ployment records. A December 2002 survey con- 
ducted by the Society for Human Resource Manage- 
ment in Alexandria, Va., found that more than one 


TIGHTLIPS 


How to cope when companies withhold references. By Barbara DePompa Reimers 





Um eee track ie 
vice on how to screen job candidates: 





quarter of IT managers agree that there has been 
greater screening of job candidates in the past year. 
Dara Herbst, president of Certified Reference 
Checking Co. in St. Louis, says the biggest challenge 
for companies hiring IT workers is gauging the accu- 


| racy of each job candidate’s technical skills. In some 


cases, it’s difficult to gain verifiable references — 
especially from dot-com companies that have gone 
out of business. Herbst and her father, Edward C. 
Andler, with David Sears, wrote the second edition 


| of The Complete Reference Checking Handbook: The 


Proven (and Legal Way) to Prevent Hiring Mistakes 
(Amacom Books, 2003). 

“Ask for verifiable information 
from the job candidate, such as a 
date of birth or Social Security 
number,” says Herbst. Although 
it’s illegal to force job applicants 
to provide such information on 
job application forms, it’s vital to 
reference-checking, she says. 

Red flags should pop up if a job 
candidate is unwilling or unable 
to supply verifiable information, 
such as a date of birth and em- 
ployer references, Herbst says. 
While it’s illegal to request date of 
birth on employment applica- 
tions, this information is consid- 
ered vital to verifying education 
and other details on a job candi- 
date’s résumé. Candidates may balk at first, but 
Herbst says most understand why this information 
must be collected. 

Several people interviewed for this story said it’s 
not wise to judge the large pool of IT job seekers as 
among the bottom 10% of performers, even though 
many companies have taken opportunities to cut 
poor performers. “Before, [GXS] had a policy that 
you [fired or laid off ] 10% of your bottom talent. The 
reality is that in the past two years, we’ve moved a lot 
of top players, too,” says Tsolakis. Most job cuts have 
occurred as GXS has moved an increasing amount of 
IT work offshore, he says. 

CIOs and analysts say that despite corporate poli- 
cies, they typically want to help job seekers who 
have earned their help. “If someone has performed 
well, possesses good skills and works hard, I’m al- 
ways willing to serve as a personal reference,” says 
Steve Schuckenbrock, former CIO at PepsiCo Inc. 
and Frito-Lay Inc. and now chief operations officer at 


| The Feld Group, an IT consulting firm in Dallas. 


When Schuckenbrock is doing the hiring, he asks 
job candidates for permission to speak with someone 
at their current or former employers. “If they can’t 
supply that information, I know there’s a problem.” 

But in the final analysis, there’s no doubt that a 
catch-22 lurks in today’s hiring process. Job candi- 
dates need to supply the names of former employers, 
yet those employers most likely can’t give a refer- 
ence because of company policy. So if you’re a hiring 
manager, be tenacious and use what you can — third- 
party screeners, multiple interviews and thorough 
skills testing — to employ the best talent. D 





DePompa is a writer and editor in Germantown, Md. 
Contact her at bdepompa@aol.com. 
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Unthmkable 


It’s time for corporate crisis 
management to grow up 


If you think you’re pre- 
pared to handle crises 
in today’s business envi- 
ronment, you may be 
kidding yourself. So says 
IAN |. MITROFF, professor 
of business policy at the 
Marshall School of Busi- 
ness at the University of 
Southern California and 
author of the forthcom- 
ing book Crisis Leadership: Planning 
for the Unthinkable (John Wiley & 
Sons, 2003). Mitroff has found through 
surveys and interviews that many For- 
tune 500 companies prepare only for the 
kinds of crises they’ve encountered in the 
past, not for the disasters that are likely 
to strike today. He and co-author Murat 
C. Alpaslan address the implications of 
being unprepared in this month’s Har- 
vard Business Review. He talked with 
Kathleen Melymuka about the need for 
companies and IT departments to face 
the reality of new threats. 


Why is traditional corporate crisis manage- 
ment no longer good enough? It’s too limit- 
ed. Corporations — or IT departments 
— tend to focus on crises they know 
about. That doesn’t serve them well. 
It’s not the crisis you know that will 
kill you; it’s the one you don’t know. 
There are all sorts of crises: economic, 
reputational, human resources. Organi- 
zations are susceptible to a wider array 
of crises than 30 years ago, and any 
one can be the cause or the effect of 
any other. Something in IT could trig- 
ger something elsewhere, or vice versa. 
Crises don’t give a damn about the si- 
los and walls we set up. 


Your study found that some companies were 
prepared for crises and others were suscep- 
tible to them. What were the main differ- 
ences between the two types of companies? 
Proactive organizations prepare for 
more crises than they have already ex- 





perienced. In reactive companies, first 
it has to hit them, then they prepare. 


How might a proactive approach play out in 
an IT group within such a company? Tech- 
nical people tend to think in nice, neat 
boxes. In a company that is proactive, 
when you look at how crises happen, 
you realize that technology is operated 
by human beings. You look at how peo- 
ple make errors, how the best-laid se- 
curity plans can be breached by error 
or omission or commission. You dia- 
logue with other parts of the company 
to see how IT connects, how someone 
could get in even with best of security. 
When you have an internal crisis team, 
you use a mix of people — not just IT 
people in isolation. A mixed group 
comes up with richer scenarios. You 
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don’t start with the assumption that it 
can’t happen. You say, “This has hap- 
pened,” and work backward to find out 
how it could happen. 


You learned that being prepared yields some 
surprising dividends, aside from better re- 
sponse. What are some of the payoffs? We 
found that over three years, on aver- 
age, proactive companies had 22 major 
crises, and reactive had 33. The aver- 
age return on assets for proactive com- 
panies was 6%; for reactive, it was 2%. 
Whether there’s a cause and effect is 
unclear, but something is going on in 
proactive companies. They have differ- 
ent ethical values. They tend to follow 
“Do no harm to any single person.” Re- 
active companies tend to do the right 
thing only if it’s cost-effective. They’re 
geared to the bottom line, but ironical- 
ly, the proactives [are] more profitable. 


Tell me about some of the types of calamities 
that might strike an IT environment. Natur- 
al disasters — earthquakes, floods — 
could affect anybody, and most compa- 
nies think about that. Second are nor- 
mal accidents that come about when 
complexity builds in the potential for 
an accident. In IT, complexity can lead 
to a glitch like Y2k. That’s a normal 
crisis — an accident that’s almost in- 
evitable, but not intentional. Then you 
have abnormal accidents: Someone de- 
liberately causing the accident. 9/11 
was abnormal. Enron was an abnormal 
economic crisis because it was caused 


The Wheel of Crisis 


This tocl helps planners face the unthinkable. The crisis team spins the wheel and then 
develops scenarios of how each crisis could occur and how two apparently random crises 
could be linked. Then the planners devise responses and risk-mitigation strategies. 
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by shenanigans. In IT, abnormal is 
where I intentionally go in as a terror- 
ist and infiltrate or put in a virus. 


Does IT have a role in averting crises? There 
are always early warning signals. IT 
can be part of a crisis signal detection 
center, to collect and filter information 
and send it to a central locale to con- 
nect the dots. In the Ford/Firestone 
crisis, Ford set up a unit to look for evi- 
dence of tire problems worldwide. But 
why didn’t it have a permanent unit 
before that? IT could take the lead to 
set up systems to look for early warn- 
ings. The role overlaps with strategic 
planning — again, tearing down silos. 


You've developed a very interesting tool to 
help managers face the possibility of abnor- 
mal crises. The wheel of crisis [see illus- 
tration] shakes up thinking with the 
idea of randomness. You spin it, and it 
lands on one category of crisis. Spin it 
again, and it lands on another. Then 
you have to come up with a scenario: 
If this happens, what do we do? And if 
both happen, what’s the connection? 
How could one set off another? It’s de- 
signed to force people out of tradition- 
al molds of preparing for the things 
they know how to prepare for. You have 
to broaden it and connect the dots. 


You also suggest using “internal assassins.” 
What would they do in IT? IT people 
would concoct a scenario that would 
do the most damage and take the 
longest time to find out. They might 
also look at how someone with a high- 
school education vs. a Ph.D. could sab- 
otage you. Then, what would you do to 
blunt it? How could you know this is 
beginning to happen? What is in your 
organization, culture, reward-and-pun- 
ishment system that would make some- 
one disgruntled enough to do this? 


Crisis management is not a high priority for 
many companies, especially when budgets 
are strained. Why should companies spend 
now to thwart potential threats? The best 
argument is the cost of an Enron or 
Ford/Firestone. It costs $2 million a 
year to start [a crisis management ef- 
fort] in a Fortune 500 company. That’s a 
drop in the bucket, and if you don’t do 
it, you’re betting the whole company. A 
crisis is virtually guaranteed to happen. 
The only a question is when and how. D 





Melymuka is a Computerworld 
contributing writer. Contact her at 
kmelymuka@yahoo.com. 

This is the latest in a series of monthly discussions 
with Harvard Business Review authors on topics of 
interest to IT managers. 
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At its best, the federal 
Health Insurance Porta- 
bility and Accountabil- 
ity Act (HIPAA) gives 
health care payers a 
strategic plan for mak- 
ing much-needed im- 
provements to adminis- 
trative and clinical 
management systems. 
HIPAA regulations protect the disclo- 
sure of all patient health information; 
the privacy compliance and code trans- 
action testing deadlines went into 
effect April 14 and 16, respectively. 

At its worst, HIPAA takes a big chunk 
from hospitals’ IT budgets and those of 
health care providers that are trying to 
stay afloat as costs continue to soar. 

At Blue Cross and Blue Shield (BCBS) 
of Minnesota, the emphasis is on creat- 
ing business value from all the efforts 
and costs of bringing IT into compliance 
with HIPAA. Ina nutshell, HIPAA re- 
quires systems and software to meet 
certain transaction and code-set stan- 
dards and formats for electronically 
transferred patient billing and insurance 
information. CIO John Ounjian is leading 
an IT staff of 1,500 in a massive mod- 
ernization of IT systems to improve ser- 
vices to consumers and health care 
providers. He recently spoke with Com- 
puterworld’s Jean Consilvio about using 
HIPAA requirements as an opportunity 
to gain a business advantage. 


Are you overhauling your existing claims- 
processing systems exclusively to meet 
HIPAA compliance? There’s the element 
of compliance. To me, HIPAA is “Y3k” 
for the health care industry. It’s costing 
80% of what my Y2k [efforts] did. But 
with Y2k, we didn’t have any opportu- 
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nity to create value. With HIPAA, we 
have the opportunity to improve the 
system to meet compliance and mod- 
ernize core systems. 


What are the core systems affected by 
HIPAA compliance? The clearinghouse is 
the hub that processes the claims by 
receiving and routing them further 
into my operations or out to other pay- 
ers. Once the claim is my claim, it goes 
through prejudication. That’s where 
you make sure it has everything, like 
provider ID information, so you can 
accept it. It then moves to [the] claims- 
payment side of our business. 

By law, if you do not have a clearing- 
house, you cannot receive a claim 
that’s not HIPAA-compliant, [because 
you do not have a way to reformat it so 
it meets the requirements]. The clear- 
inghouse can receive a claim in any 
format [and] put it in HIPAA format, 
which is based on the ASC X12 stan- 
dard, and then give it to my prejudica- 
tion system. 


AT A GLANCE 
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than 2.4 million members. 


1 Offers members access to 96% of 
health care providers in Minnesota. 


1 In 2001, the not-for-profit, taxable 
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1 Employs more than 3,800 people, in- 
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eV ceeUleMLOLOMe ts) Ma 


One health care CIO views HIPAA 
as an opportunity to gain business 
value. By Jean Consilvio 


Beyond 
Compliance 








What happens if you get a claim that’s 

not HIPAA-compliant? The payer can’t 
receive any claim that’s not HIPAA- 
compliant. If the health care provider 
sends the claim to any clearinghouse 
first, we can pay it. 


So upgrading your clearinghouse is a strate- 
gic benefit for both you and health care 
providers? Yes. I’m not rejecting claims. 
The part that will help my provider 
save money is that instead of sending 
the claim to another clearinghouse, the 
provider can send it to me. I end up 
creating stronger relationships with 
providers. 


And what are the cost benefits for you? 
Let’s say I start improving my edits in 
prejudication. If I have my stronger 
edits at the front rather than the back 
[of that system], the claims go through 
with less cost because there are fewer 
exceptions or errors. 


How has this affected your IT staff and help 
desk? Call me next year. I’m hoping 
we'll have less people and that HIPAA 
will reduce costs for us because we'll 
have fewer exceptions and more pro- 
cedures that are standardized. 


You filed an extension for the Standard 
Transaction and Code Sets. Does this affect 
your HIPAA clearinghouse initiative? The 
reason we did that — and that just 
about everyone else did, too — was 
because if I’m a payer and I didn’t file 
an extension, then I couldn’t receive 
claim files from all providers. By not 
filing for an extension, I wouldn’t have 


been able to receive claims from some- | 
| How strict are the privacy rules? HIPAA 


one who wasn’t compliant. But we are 
ready to meet the October deadline. 


Did you develop a cost-benefit analysis for 
achieving compliance? Yes, we have our 
own metrics we use to measure as we 
go through the project. We separate 
which costs are compliance and which 
are enhancements or modernizations. 


It sounds like you view HIPAA as more of a 
cost-efficiency opportunity than an onerous 
requirement. Is that so? We think HIPAA 
is good for the industry. A lot of times 
people miss this simple point: Bank 
checks have a microline that tells the 
bank your account number when pro- 
cessing a check. What if there were no 
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standards for coding that number? 


| Then you'd need coding routines. 
| When it comes to [processing health] 


claims, they’re submitted many ways. 
We need a routing [routine] for all 


| points of submission. What HIPAA’s 

| saying is, “Knock it off. Everyone sub- 
| mit a claim a standard way.” Remit- 

| tance, eligibility, inquiry — it will 

| improve the accuracy fer all types of 
| claims processing. You must do it the 


HIPAA way. 


policies require that security and pri- 


| vacy are activated at the point where 
any access to information is attempted. 
| You have to know the rules, especially 
| on the privacy side. For example, for a 

| daughter who’s 12 years old, there’s 


certain information that even mom 


| and dad can’t access. So under the law, 


I have to protect that 12-year-old. Pri- 


| vacy rules affect the desktops that cus- 
| tomer service people use and Web 
self-service portals. 


How are you training all BCBS employees 
on HIPAA rules? We just launched 
self-taught portal training for all com- 
pany employees. It’s part of human 


| resources training for new employees, 


and all employees are tracked to make 


sure they complete the required train- 


ing. After that, they can access HIPAA 
information [online] any time they 
need to brush up on the rules and 
regulations. D 
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Data Warehousing 
Efforts Fall Short 


in a recent survey of 142 compa- 
nies worldwide, 41% of respon- 
dents said their companies have 
experienced at least one data 
warehouse project failure, and 
only 15% of the respondents 
claimed that their data warehous- 
ing efforts to date “have been a 
major success.” 

The study, conducted by 
Arlington, Mass.-based Cutter 
Consortium, also found that just 
18% of companies say they have 
obtained a “360-degree” view of 
their customer data - or the abili- 
ty to access, integrate and ana- 
lyze pertinent data across all of 
their most important customer 
channels. 


HOW IS THE VALUE OF 
YOUR COMPANY'S IT 
INVESTMENTS MEASURED? 


Decreased costs 
eres 


Increased productivity 
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Agee ate 5 grey 

Total cost of ownership 

Increased revenues 

ss eae ee 


as, 


Length of time to payback 


ie 


ROI formula or benchmark 
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Other 

11% 
Don't know/refused 
0.5% 


IT value isn't measured 

(0.5% 

Base: 200 IT leaders at companies with 
$250 million to $5 billion in annual revenue. 
SOURCE: DELOITTE & TOUCHE LLP, NEW YORK 


AND IDG RESEARCH SERVICES GROUP 
FRAMINGHAM, MASS.. 2002 
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HE ECONOMY is forcing companies to ex- 
amine every cost-cutting opportunity. As a 
result, offshore IT operations are becom- 
ing increasingly attractive. Drastically 
lower wages overseas make the business 
case compelling, and telecommunications improve- 
ments have finally made it viable. 
Low-skill jobs have gone offshore for years, but 
higher-skill jobs are now moving to other countries. 


Offshore estimates are stag- 
gering. Forrester Research 
is forecasting that by 2015, 
3.3 million white-collar jobs 
— 472,632 of them in IT 
and mathematics — will 
shift from the U.S. to coun- 
tries with lower labor costs, 
taking almost $136 billion in 
wages with them. 

Even domestic IT out- 
sourcers are being forced 
to go offshore. Historically, 
they have resisted, because 
lower wage structures re- 
sult in lower revenues. But 
Electronic Data Systems, 

Accenture, Affiliated Com- 

puter Services and others 

now have offshore facilities and are re- 
cruiting heavily in India. 

Microsoft is moving some Windows 
development to India. Other current 
offshore outsourcing efforts span di- 
verse industries, going well beyond IT: 

@ Massachusetts General Hospital 
has some of its CT scans read by Indi- 
an radiologists. 

@ Fluor Corp. employs 1,200 offshore 
draftsmen and engineers to develop 
blueprints for industrial facilities. 

@ Indian and Chinese engineers de- 
sign chip circuits for Inte] and Texas 
Instruments. 

@ Proctor & Gamble has 650 em- 
ployees in Manila helping prepare 
worldwide tax returns. 





@ Russian engineers are 
designing luggage bins for 
the Boeing 777 airplane. 

Other industries are 
leading the way offshore, 
but IT is catching up fast. I 
conducted an informal sur- 
vey of 400 IT leaders at 
the Computerworld Pre- 
mier 100 conference in 
February. Currently, 72% of 
those leaders’ companies 
aren’t involved in any off- 
shore development or 
maintenance. However, 
most said their companies 
plan to make the offshore 
leap soon; less than half 
will still be uninvolved in 

two years. By 2005, approximately one 
out of every 10 of the companies that 
send IT work offshore will spend 
more than 25% of their development 
and maintenance budgets offshore. In 
fact, one CIO told me that he’ll have 
70% of his development and mainte- 
nance staff offshore in three years. 

Start planning now. Before your 
CEO asks, look at the following issues: 

® Determine if offshore is appropriate for 
your company. Some organizations can’t 
go offshore for security reasons. 

® Define the scope. Common candi- 
dates for moving offshore are call cen- 
ters, application development, applica- 
tion maintenance and infrastructure. 
Some jobs, especially those requiring 





ing for 
hore 


lots of face-to-face interaction, are dif- 
ficult to move offshore. 

@ Understand the trade-offs of various off- 
shore locations. The leading IT locations 
(primarily India, Ireland and the Philip- 
pines) have highly educated workers 
who speak English well, and they try to 
minimize difficulties like time-zone dif- 
ferences. Newer entrants (including 
Pakistan, China, Russia and Brazil) of- 
fer even lower prices but have weaker 
infrastructures and more difficulties 
with language and time zones. 

@ Determine whether you want to build 
your own offshore IT facility. Large multi- 
national corporations with an estab- 
lished presence in a lower-cost coun- 
try may decide to build their own. 
Smaller companies or those without 
operations in a low-cost country are 
generally better served by contracting 
with a third-party offshore outsourcer. 

@ Select an outsourcer with both onshore 
and offshore capabilities. Companies that 
have a U.S. sales presence but do all 
the work offshore offer the lowest 
prices. Pay a little more and use an out- 
sourcer that does some work in the 
U.S. and some offshore. Specify which 
work is to be performed in each loca- 
tion. Such an arrangement reduces risk 
but still offers considerable savings. 

® Be realistic about the savings. Between 
30% and 40% is realistic, vs. the 70% 
claimed by some offshore suppliers. 
While wages are lower, you will incur 
additional supplier management, com- 
munications and travel costs. 

Offshore sourcing alternatives are 
becoming more attractive, more viable 
and more prevalent. As you proceed, 
consider the same issues you would 
address in any outsourcing decision. 
Then determine how to best leverage 
offshore operations to reduce costs — 
before your CEO demands it. D 


LOOK BEFORE YOU LEAP 

Read more about offshore outsourcing: 

e QuickLink 36712 
www.computerworld.com 
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iane Morrell, vice president/director 

of research for the Gartner Group in 

Stamford, CT, says that employers are 

conducting a more thorough assessment 
of people to work in IT security. That’s good news 
for IT professionals who have a track record for 
accomplishment, for remaining with a company for 
a reasonable amount of time and who have proven 
their ability to apply technology to entirely new situ- 
ations. Not so much for people who have been job- 
hoppers and whose background would be difficult 
to track, much less qualify, for appropriate security 
clearances. “The assessment of people is receiving 
more scrutiny and is more acute than in the past,” 


says Morrell. 
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it sounds so easy ... point and click, security. The reality is that 
requirements for improved information security become more 
complex on a daily basis — from protecting consumer informa- 
tion to securing the nation’s IT infrastructure. As the need for 
more advanced technology increases, so does the need to be 

| able to identify, hire and keep people qualified to work in the 

» world of IT and IT security. 


Gartner Group’s research indicates that there 


will be renewed focus on how government agen- 


cies, the military and corporations outsource basic 


transaction work in the IT arena. The cost has been 


driven down by outsourcing, an economic factor 


that has to play into the equation of how networks 


and systems are developed and how companies 


establish security criteria for their suppliers. 


Morrell says the change in national security 


focus has speeded up the need to transition the 


national workforce to meet cost restraints and 


security. The result is a higher-level skill set for IT 


professionals here in the U.S. Traditionally, U.S. 


companies measure performance by demonstrable 


skills. Gartner Group predicts this will change. “It’s 
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Vexcel i 

Software Engineer to work in 
Boulder, CO. Position requires 
master’s degree in Electrical and 
Compu 

as working knowledge 
research, design and develop- 
ment of spectral estimation and 
other processing algorithms for 
synthetic aperture radar and 
polarimetric synthetic aperture 
radar image processors used in 
target feature extraction and 
image formation applications uti- 
lizing programming language 
C++. Send resumes by mail 
only to Susan Burke, Vexcel 
Corp., 4909 Nautilus Court N 
Boulder, CO 80301 and refer to 
job #2230 


ABAP Developer wanted to par- 
ticipate in the develop., pro- 
gramming, maintenance, & 
enhancement of SAP HR 
Payroll apps. using ABAP pro- 
gramming language; collaborate 
w/ users, ITS staff & other 
stakeholders to identify user 
reqts., assess avail. technolo- 
gies & recommend solution 
options; apply a broad knowl- 
edge of various tech. functions 
to understand the procedures 
& expected system perf. asso- 
ciated w/the intro. of SAP sys- 
tem changes & upgrades 
assess objectives for assigned 
project phases; & recommend 
tech. strategies & tactics to sat- 
isfy business needs & ensure 
on-time product delivery. Must 
have Bach. deg. in Comp. Sci 
Elect. or Electronic Eng. or relat 
ed field, & 3 yrs. exper. in SAP 
incl. design, develop. installation 
& modification using ABAP & 
incl. exper..in SAP/HR Pa i 
applications, ABAP/4 Repor- 
ting, SAP-Script, Batch Data 
Communications & BAPis 
40/hr/iwk. $93,000/yr. Send 2 
resumes to Case#200201216 
Labor Exchange Office, 19 
Staniford St., st Fi., Boston, MA 
02114 


Sr. Software Engineers for vari- 
ous plant automation & informa- 
tion architecture projects 
Analyze systems req's; design 
customized features for existing 
technologies/systems & updates 
& initiate new SW development 
ventures. Multiple positions 
available. B.S. in Comp Sci or 
related field & relevant SW engi- 
neering experience req'd. Apply 
by resume only to Jobs A*M 
Recruiter, Invensys Systems. 
Inc., 26561 Rancho Parkway 
South, Lake Forest, CA 93630. 
No calls please. 
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the ability to synthesize knowledge versus academic 
training,” Morrell explained. “The demand will be 
for an IT workforce that can design around and in 
between organizations, that is intuitive, that is fluent 
in skills and that can apply knowledge to entirely 
new spaces. You'll see a greater demand for higher 
order thinking to apply to research and develop- 
ment, nanotechnologies, biotechnologies — with the 
question of national security mixed in.” 

Hiring employers can’t merely recruit or wait for 
resumes to cross the portal in this new paradigm. 
According to Morreil, successful hiring companies 
will constantly mine the IT workforce to identify 
those who have the sought-after competencies. “| 
think we'll see a lot of focus by companies on keep- 
ing their critical talent satisfied and with identifying 
new talent through their current employees. That 
puts an entirely new light on the company/employee 


relationship.” 


IT Careers 

For information on recruitment advertising, 
Please contact: Nancy J. Percival, Director 
Recruitment Advertising, at 800-762-2977 
500 Old Connecticut Path 

Framingham, MA 01701 

Produced by Carole R. Hedden 
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Attractive salaries and benefits. 
Please forward your resume to 
H.R. Mgr., Computer Ho: 

Corp., 49 Old Bloomfield 
Avenue, Mountain Lakes, New 
Jersey 07046-1495. Call 973- 
299-4006 mail: jobs@ 
computerhorizons.com. An 
Equal Opportunity Employer M/F 


hours/wk. Respond with 
pies of resume to Case 


Labor Exchange 


19 Staniford St., 1st F 


Software Engineers - 
Min Edu - Bachelors 
Degree, some posi- 
tions require Master s 
Degree or equi. Min 
include having a 
Exp - adequate ssid: ha Capugiaial 
i nn 7 information systems c 
industry experience. field and working knowledge of 
Please send resumes Mews Basic, SQL Server, 
acie and maintenance o' 
to Attn:MA, Alekhya] — |windows-based server net- 
| i works. This position is entry 
Serer apes = level. Respond by resume to 
ipper is 


Eric Rasmuson, Chemical & 
Fremont, CA - 94538. 


Inc. seeks applicants fo 
position of Programmer 

n Wheatridger to 
moderately lex tasks in a 
number of ler and soft- 
ware related areas Req- 
uirements for the 


Hygiene, 10201 W. 43rd Ave. 
#201, Wheatridge, CO 80033. 
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Senior Software Engineer: 
Design, implement and test data 
communication products. Work 
in C, C++ and Assembly to help 
deliver communication products 
to the company and customers. 
Design and develop low levei 
system drivers for communica- 
tion with TCP/IP stack and other 
networking layers. Design and 
develop iest suites to actively 
test and passively monitor vari- 
ous services enabling real-time. 
pervasive and fiexible monitor- 
ing of the IP network. Perform 
development using expertise in 
TCP/IP. RTP/RTCP. SIP. 
Radius, DNS, HTTP, SMTP. 
POP3, IMAP and various other 
IP based protocols. Perform 
development and debugging on 
Power PC based architectures 
using OSE Requirements 
include a Bachelor's degree or 
equivalent in Computer Science, 
an Engineering discipline or 
related field and four years of 
work experience in related field 
of software development 
Applicants must have unrestrict- 
ed authorization to work in the 
United States Salary 
$83,960/year. 40 hours/wk 
Respond with two copies of 
resume to Case #200200499, 
Labor Exchange Office, 19 
Staniford St., 1st Fl., Boston, MA 
02114. 


inventory Systems Analyst 
(Memphis, TN) — Collection and 
analysis of warehouse operations: 
data in Excel, including capacity 
levels, replenishment levels and re- 
porting of inventory data. Respon- 
sible for setting up queries of Micro- 
soft Access, SQL, and Relational 
Database Management tables to 
facilitate data retrieval of pertinent 
inventory stocking and shipping 
information. Designs and imple- 
ments warehouse process flow by 
effectively building putaway, pick- 
ing, and replenishment instructions. 
Must have a Bach. Deg., or foreign 
deg. equiv., in Business Admin 
Mgt. Inio. Sys, or related field 
Must have 2 yrs exp. in the job 
offered OR 2 yrs exp. as a Systems 
Analyst. Exp. mentioned may have 
been obtained concurrently and 
must include 2 yrs of exp. in each of 
the following: Microsoft Access 
Query, Excel, SQL, and Relational 
Database Management. Mus 
have proof of legal authority to 
work in the U.S. Submit resume to: 
A. Malone (REF:ISA), Human 
Resources, 1800 Pyramid Place 
Memphis, TN 38132. 


MIS/Programmer Analyst wanted 
by Driktech, LLC, a small fast 
growing company. Candidates 
must have minimum bachelor's 
degree with exp. in IT project 
management and sales. Attractive 
wage with full benefits. Please 
contact 1850 Timber Trail, Ann 
Arbor, Mi 48103. EOE 


Corporate Computer Services 
(CCS) has multiple openings for 
System/Programmer Analysts for 
both entry & experienced levels 
(minimum BS). Skills in following 
areas C/C++, VB, Oracle are plus 
We are small but we do not lay off. 
Attractive wage w/ benefits. Apply 
HR@ccsiusa.net 


IT Instructor 

Taylor Business Institute, 
an educational institution 
seeks to fill the position for 
an IT Instructor in Chicago, 
IL and unanticipated locs in 
US. Must have BS and 2 
yrs s/ware experience 
Respond by resume to Attn 
Janice Parker, Taylor 
Business _ Institute, 200) 
North Michigan Ave., Suite 
301, Chicago, IL 60601 
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SOFTWARE CONSULTANT 


Analyze & evaluate existing or pro- 
posed software systems. Dsgn, 
dvip, implement & improve pro- 
grams, sys. and related procedures 
to process data using in-depth 
knowledge of the software dvipmnt 
life cycle. Encode, test, debug & 
install operating programs & other 
sys. software utilizing knowledge of 
RDBMS environments & program- 
ming languages. Bachelor's (or 
equiv.) in Comp. Sci., Math 
Engnrg, Bus., Commerce or Comp. 
Info. Sys. + 2 yrs exp. in position 
offered or as a Software Engnr. 
Prog. Analyst or Sys. Analyst/Mgr/ 
Admin. reqd. Exp. must include: (a) 
Oracle or Sybase RDBMS environ- 
ments; and (b) Java or Cobol or 
PL/SQL programming languages. 
High mobility preferred. 40 hrs/wk. 
8 am - 5 pm, $64,240/yr. Qualified 
applicants submit resumes to Site 
Administrator, Greene County 
Team PA CareerLink, 4 West High 
Street, Waynesburg, PA 15370- 
1324. Please refer to Job Order 
No. WEB 316659 


Senior Notes Application Develop- 
er wanted to provide tech. expertise 
in core application development 
technologies; handle all aspects of 
most tech. projects like systems, 
analysis, design, development. 
quality assurance, installation & 
maintenance under limited guid- 
ance; interact with division mgmt 
on tech. planning issues; provide 
programming solutions for complex 
business processes involving work- 
flow, tracking & other tech. prob- 
lems using Lotus Notes & Dom- 
ino; design applications that inter- 
act with existing Database Man- 
agement Systems (DBMS) such as: 
Oracle DB2 using Open Database 
Connectivity (ODBC) tools; set up 
access control for the applications 
using Domino's security features. 
Must have Bach. deg. in Comp. 
Sci., Eng. or related field, & 3 yrs. 
exper. with Lotus Notes, incl. exper 
in website technology & develop- 
ing workflow projects. 37.5/hr/wk 
Salary $94,080/yr. Send 2 resum- 
es to Case#200201110, Labor 
Exchange Office, 19 Staniford St 

St Fi., Boston, MA 02114 


Oracle Application Engineer -- 
Develop application software using 
Oracle Technologies database in 
the back end and Developer 2000: 
(Forms6i/Reports6i) in the front 
end. Apply expertise with Oracle 
PL/SQL, application server, and 
stored procedures to assist in the 
development of intranet/internert 
applications and reports for Com- 
pany. Provide application support 
to all user departments. Require- 
ments: B.Sc. in Computer Applica- 
tions, Comp. Science, Computer’ 
Engineering, Electrical or Mech- 
anical Engineering and 2 years 
experience in job offered or 2 years 
in software development in Oracle 
or Java Technologies. Candidate 
must also possess demonstrated 
expertise developing applications. 
forms and reports using Oracle 
technologies; demonstrated exper- 
tise developing applications using 
On-line Transactions Processing 
(OLTP). Will supervise 0-3 employ- 
ees. Salary $72,000/year, M-F, 9:00 
-5:30. Send 2 resumes to case 
Number 200200548, Labor 
Exchange Office, 19 Staniford, ist 
Floor, Boston, MA 02114 EOE 
Applicants must be US workers eli- 
gible to accept full-time employ- 
ment in US 


Full time position to work as 
System Engineer, Need knowl- 
edge of using Programming skills 
in C, C++, PL/SQL, shell scripts, 
Tru64 Unix, DSP, Assembly and 
RTOS: pSOS, Vxworks. Tools 
GDB, XDB Debugger, Object 
Browser, pROBE + LAB- 
TOOL48, Oscilloscope, Custom- 
ized Simulators, ADSP-2101 
Software simulator, WinRunner 
6.0 SCADA: LABVIEW, Wonder- 
ware, onsite Requires Bachelor's 
degree in Electronics or equiva- 
lent and 2 years of experience in 
the job offered. Applicants send 
resume to Pyramid Consulting 
Inc, 8665 Providence Drive 
Noblesville, IN 46060. 


IT CAREERS 


SENIOR PROGRAMMER/ 
ANALYSTS 


MARA CONSULTING, INC., a 
California-based Corporation, has 
immediate openings for Senior 
Programmer/Analysts with at least 
five years’ experience in Natural/ 
ADABAS/Programming who have 
worked on IBM mainframe plat- 
forms utilizing MVS/XA ESA and 
OS/390 Operating Systems. Appli- 
cants must also have at least four 
years of formal academic training in 
computer data processing, Compu- 
ter Science or a related field culmi- 
nating in government diplomas or a 
Bachelor's Degree. Must be willing 
to travel from the Sacramento. 
California area to temporary work 
sites throughout the United States 
to be paid, at least, the prevailing 
wage in that area. Employees will 
remain employed by MARA CON- 
SULTING, INC., (www.maracon 

) with continuing bene- 
fits. Send your resume with current 
address and telephone number to 
MARA CONSULTING, INC., 8577 
Almond Bluff Court, Orangevale, 
CA 95662 or email to 


Mmaracons@pacbeil net. EOE 


Senior Design Engineer: 
Design, provide specifications 
and implement software for opti- 
mizing UNIX and Windows NT 
systems connected to company 
storage system products 
Develop and test collectors, 
agents and programming inter- 
faces to APis, operating sys- 
tems, and relational databases 
Use variety of languages such 
as C/C++, SQL, JDBC and 
Java. Requirements include a 
Bachelor's degree or equivalent 
in Computer Science, an 
Engineering discipline or related 
field and at least five years of 
progressively responsible work 
experience in the job offered or 
related field of software engi- 
neering. Applicants must have 
unrestricted authorization to 
work in the United States. Salary 
$105,000/year. 40 hours/wk 
Respond with two copies of 
resume to Case #200200859 
Labor Exchange Office, 19 
Staniford St., 1st Fl., Boston, MA 
02114 


Paymap, Inc., a Division of First 
Data Corporation, a company in 
Greenwood Village, CO has an 
opening for an Application 
Architect to work in San 
Francisco, CA. Analyze, design 
and develop applications soft- 
ware for company's direct mar- 
keting team using Java, JSP 
Enterprise Java Beans, Cold 
Fusion, and PL/SQL. Requires 
bachelor’s degree in computer 
science, engineering, or related 
field; 2 years as a software engi- 
neer; and working knowledge of 
Java, JSP, Oracle databases 
and PL/SQL Respond by 
resume to Norm Barnett, First 
Data Corp., 12500 E. Belford 
Ave., Mail Stop M21B12, 
Englewood, CO 80112 and refer 
to job #4440MA 


Database Analyst needed for IT 
Consulting Firm. Position will plan, 
coordinate, and implement security 
measures using PKI, LDAP, JAAS 
and Virtual Private Database 
Candidate must have experience 
with: Red Hat Linux (cluster servers 
for Oracle RAC), SUN Solaris and 
HP-UX (awk, gawk scripting) 
Oracle 8i, 9i design, administration 
sizing, capacity planning, rman and 
statspack.. Installing (10.7, 11.0. 
11.5), patching, upgrading and 
cloning Oracle applications. This is 
a full time position. A Bachelors 
Degree in Computer Science or 
related field is required as well one 
year of experience. Please mail 
resumes to Tomlyn Mathews, 
Verities Solutions, LLC, 8084 RFD, 
Long Grove, IL 60047 


Sr Internet Software Developer, 
TSYS. Lead a distributed team of 
developers towards successful pro- 
ject execution; work w/ lead 
Architect, business analyst, and 
project manager in designing and 
developing solutions for client 
and/or product; perform functions 
of developer, system analyst, 
designer & tester; and implement 
web-based n-tier applications using 
Object Oriented conceptual skills 


Competitive Salary. Bachelor's 
degree or equivalent in Computer 
Science + (5) yrs total of experi- 
ence as Software Engineer includ- 
ing (3) yrs in server side technolo- 
gies/tools such as J2EE (JSP, JMS, 
EJB, Serviets, JDBC), XML, BEA 
Weblogic or other Java application 
server, ORACLE PL/SQL, C++, 
OOAD using tools like UML, 
TogetherJ, Rational Rose, Design 
Patterns, with (1) yr Enterprise 
Application Integration (EAI) using 
technologies such as CORBA and 
MOMs. Must have legal authority to 
work in the U.S. Please send 
resume demonstrating all minimum 
requirements to TSYS Attn: Kerri 
Alexander, 1600 15 Ave 
Columbus, GA 31902 


Programmer Analyst, 40-hr wk, 
8 - 4PM, Bachelor's or foreign 
degree equiv. in Computer Sci- 
ence or Computer Engg. or 
Electrical Engg.+ 2 yrs exp. in 
job offered or 2 years as Sys- 
tems Analyst. Analyze, review 
and rewrite programs; prepare 
records and reports; consult 
with staff and users to identify 
operating procedure problems; 
formulate and review plans 
regarding steps required to 
develop programs; devise flow 
charts and diagrams; modify 
Programs. Resume to Dianna- 
Andrea Corp., 4210 NW 4 St., 
Miami, FL 33126. 


Seeking qualified applicants for the 
following positions in Memphis, 
TN: Senior Systems Programmer, 
Devise procedures to solve com- 
plex systems and applications 
problems. Requirements: Bache!- 
or's degree* in computer science, 
MIS, engineering or related field 
plus 5 years of experience in sys- 
tems programming. Experience 
with UNIX, C and logistics code 
development also required. *“Mas- 
ter's degree in appropriate field will 
offset 2 years of general experi- 
ence. Submit resumes to Sibi 
George, FedEx Corporate Ser- 
vices, 1900 Summit Tower Bivd., 
Suite 1400, Orlando, FL 32810. 
EOE M/F/D/V 


Technology Support Mana- 
ger - for non-profit organiza- 
tion to manage and imple- 
ment all internal IT solutions 
including network support, 
troubleshooting, and inter- 
nal helpdesks, for Windows 
2000, XP, and Exchange 
Server environments. Pos- 
ition requires degree or 
experience. Send cover let- 
ter and resume (no calls) to 
A. Marano, NPower NY, 
145 W. 30th St., 8th Fl, NY, 
NY 10001 


Programmers with advanced 
technical skills to program 
interrelated business opera- 
tions and merchandising 
applications. Skills to include 
ERD, DSD and dataflow 
diagramming. Send resume 
Resources, 
Attn: SL, Req #333, 
Cleveland Indians, P.O. 
Box 94954, Cleveland, OH 
44101-4954. EOE. 


to Human 


Programmer Analyst 
needed w/exp in using 
Java, VB, C++, JDBC, 
Weblogic, XML, XSL, 
ASP, IIS, LDAP, Sybase, 
SQL Server & Oracle on 
Windows NT & Unix 
Platforms. Send resu- 
mes to Open Systems 
Technologies, Inc., 8 
Winter Street, 6th Floor, 
Boston, MA 02108 


Programmer/Analyst 
Analyzes, designs, develops 
and modifies client/server 
based applications, to facilitate 
access, analysis and report 
generation using, novell/java 
and mathematical regression 
algorithms for accounting de- 
partment. Position requires 
Bachelors degree in computer 
science or equivalent and two 
years experience in job 
offered. Send resume to 5200 
Vineland Road, Suite 200, 
Orlando, Florida 32811, 
Attention: Laurie Mooty 


Seeking qualified applicants for the 
following positions in Memphis/ 
Collierville, TN: Senior Program- 
mer Analyst. Formulate/define 
functional requirements and docu- 
mentation based on accepted user 
criteria. Requirements: Bachelor's’ 
degree” in computer science, MIS, 
information technology, engineer- 
ing or related field plus 5 years of| 
experience in systems/applications 
development. Experience with 
Java; either C or C++; and devel- 
opment of transactional distributed 
systems/applications aiso required 
“Master's degree in appropriate 
field will offset 2 years of general 
experience. Submit resumes to Sibi 
George, FedEx Corporate 
Services, 1900 Summit Tower 
Bivd., Suite 1400, Orlando, FL 
32810. EOE M/F/D/V. 


Programmer Analyst, Wilmington, 
DE. Bachelors in Comp. or 
Electronics or MIS + one year exp. 
in design, develop & implement 
net enabled applications utilizing 
Java, HTML, XML, Java/RMI 
CORBA, EJB, ASP/JSP, C, SQL, 
and PL/SQL and do OOP using 
C++ and C # for Windows 
95/98/NT & Unix; design GUI using 
VB, Web sphere, Visual Age for 
Java and Developer 2000; design 
& develop RDMBS using Oracle, 
SQL Server, MS Access, DB2 and 
generate reports using JDBC, 
Forms 5.0, Reports 2.5. Respond 
to HR Dept, Neotech Solutions 
Inc., 1170 Broadway, Suite 314, 
New York, NY 10001 


Programmer Analyst - Pharmaceu- 
tical/Life Sciences Co. seeks Pro- 
grammer Analyst-LIMS to do sys- 
tems development, software test- 
ing, technical writing & provide 
support for scientific-related sys- 
tems. Reqs. masters degree w/ 
concentration in CS or MIS, soft- 

development life cycle 
(SDLC) expertise in the pharma- 
ceutical industry & lab-based sci- 
ence background. Send CV & 
salary requirements to Aventis 
Behring, LLC att: Jill Hansen, 1201 
N. Kinzie, Bradley, IL 60901 
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Principal Technical Support 
Specialist/Team Lead (User 
Support Analyst Supervisor) —- 
Supervise staff of Support Engin- 
eers in performance of technical 
support services for customers & 
users of company’s leading edge 
object oriented database & e-busi- 
ness platform systems. Will provide 
software solutions for customers w/ 
Particularly complex tech. prob- 
lems, review customer require- 
ments, track tech. issues, identify 
potential software problems, en- 
gage in performance tuning, partic- 
ipate in test cycle of new products, 
generate reports & perform coding 
tasks as necessary using object ori- 
ented technology with C++, UNIX 
and/or Windows. BS in Comp. Sci. 
& 5 yrs progressive exper. in soft- 
ware programming/analysis or 
engineering & at least 2 yrs exper 
(combined or separate) in direct 
tech support engin. w/ customers & 
in programming in C++; requires 
proficiency in object-oriented pro- 
gramming, Visual Basic and SQL, 
& understanding of Object Store 
server process. Will accept MS 
degree in Comp. Sci. & 2 years 
specific exper in lieu of B.S. and 5 
years. 40 hours/week; Salary 
$88,468/yr. Send two applications 
to Case #200115814, Labor 
Exchange Office, 19 Sianiford St 
18t Fi, Boston MA 02114 


Software 
Engineer 


Research, design and 
develop computer soft- 
ware systems for hand- 
held automotive diagnos- 
tic equipment. MS in 
computer science or 
engineering required. Job 
site in Detroit-based 
offices. Please send 
resumes to: 


Vetronix Corp., 

HR Department 
2030 Alameda 
Padre Serra 
Santa Barbara, CA 93103 
No phone calls please. 


@ vant Carpertion 


Network Engineer - SNP 
Technologies is seeking a 
network engineer for its 
Hamden, CT office with 
CNE and MCSE certifica- 
tion, knowledge of Windows 
NT/2000 & Exchange ser- 
vers, Cisco firewall & net- 
works; experience in securi- 
ty aspects of networks, 
WAN & in administering 
databases, and 6 years of 
related experience. Please 
E-mail your resume to us 
at:: Resume@SNP.com. 


Systems Analyst: Design, 
develop and implement 
software systems, incl. tele- 
phony, radio and satellite. 
Use expertise in C, 
SNMPC, GSM system, etc. 
2 yrs exp. in job offd or 2 
yrs exp. in related pos. 
wisame duties & BS in 
Enng, Comp. Sci. or relat- 
ed. EOE. Contact: SP 
Software Solutions, Inc., 
12320 Clairmonte Ave., 
Alpharetta, GA 30004. 


wo0304021E/W/MW.3 


Sr. Systems Analyst sought by 
pharma R&D Co. in Plainsboro, 
N.J. Candidate must have a 
Bachelor's degree in a comp 
sci. or eng’g field & 5 years of IT 
exp or a Master's degree in a 
same field of study & 3 years of 
IT exp. Pharma. exp. preferred 
Must have experience in Java, 
JSP, Java Serviets, Dociets 
(must have coded and used 
Java Dociets), EJB, JDBC & 
other J2EE technologies, HTML, 
ANT, XML, WebSphere V4.0 
Application Server, WebSphere 
Studio Application Developer 
V4.0, Jbuilder, JProbe, Oracie, 
SQL, ClearCase and Rational 
Rose. UNIX exp. & exp. w/ 
other Object Oriented 
Languages (such as C++) a 
plus. Ability to work indepen- 
dently as well as in a large team 
environment in a senior role is 
also required. Must be able to 
ensure accuracy of system doc- 
umentation & communicate 
effectively w/ development staff 
& information mgmt personnel 
Send resume to Strategic 
Staffing, Bristol-Myers Squibb 
Co., P.O. Box 4000, M/S E14- 
12, Princeton, NJ 08543, Job 
Code TD-806. 


Software Developer |i. Maintain 
prgm in Tempest Messaging 
Systm using C++; dvip, impimt & 
maintain applic components & 
features; perform unit testing; 
dvip applics using C/C++, MFC, 
VB. NET, C# & Managed C++; 
provide tech assistance to end 
users; write prgm & job stream 
documentation. B.S. Cornp. Sci., 
MIS or rel. field + 2 yrs exp. as 
s/ware engr or similar duties 
under different job title, 2 yrs exp 
wiconfiguring & prgmg using 
Tempest Messaging Systm & 
dvipg s/ware in CMM level 3 
envrmt. Prgmg exp with 
C/ProC/C++/C#, VB6, ActiveX, 
COM, MFC, NET Framework, & 
UML. Exp w/following dvipr 
tools: PVCS Tracker; PVCS 
Version Mgr; NuMega Bounds- 
Checker; Visual Studio 6; Visual 
Studio.NET; MS Visio 7.0; & MS 
Installer. 40 hrs/wk, $50K/yr 
Must have proof of legal auth to 
work in US. Send resumes to IA 
Workforce Center, 1700 S. 1st 
Ave., Ste 11B, IA City, IA 52244- 
2390. Please ref to JO 
1A1101667. Employer paid ad. 


Network Engineer - SNP 
Technologies is seeking a 
network engineer for its 
Hamden, CT office with 
CNE and MCSE certifica- 
tion, knowledge of Windows 
NT/2000 & Exchange ser- 
vers, Cisco firewall & net- 
works; experience in securi- 
ty aspects of networks, 
WAN & in administering 
databases, and 6 years of 
related experience. Please 
E-mail your resume to us 
at:: Resume@SNP.com 


Software Engineer (with Mas- 
ters degree and 1 year experi- 
ence) - Williamsport, PA. Job 
entails and requires experi- 
ence in design, development 
and implementation of appli- 
cations using SAP (ABAP/4, 
Fi, MM, HR, BW), Oracle, 
SQL Server, APO, JAVA, C 
and C++. Relocation within 
USA possible. Attractive com- 
pensation package. Send 
resume to Supriya Palayekar, 
Palayekar Companies, Inc., 
1959 East Third Street, 
Williamsport, PA 17701 


| Or ees 


Developer sought by 
oncology/therapeutics div. of 
pharma R&D co. in San 
Francisco, CA. Candidate must 
have a Bachelor's degree or 
equiv. in Computer Engineering 
or related. Min. of 5 years expe- 
fience in application develop- 
ment & database design & 
development on Oracie platform 
required Extensive exp. in 
OOAD Object Oriented 
Programming, DBA, database 
design tools. data modeling 
tools (ERWin), SQL, PL/SQL 
Unix (sheliscripts, FTP automa- 
tion), Java, Oracle 8i database. 
Oracle 11i applications (order 
fulfillment), Blue Martini CRM 
and HTML, pharma. pricing s/w 
customization required 
Experience in pharma. pricing 
required. Must have strong ana- 
lytical skills in pricing infrastruc- 
ture, information services & data 
analyses, & excellent oral & writ- 
ten communication skills. Send 
resumes to: OTN, Staffing Dept., 
395 Oyster Point Bivd., Suite 
405, South San Francisco, CA 
94080, Job Code: VM-764 or fax 
resume to: (650) 737-9576 or 
email to: jobs.otn@otnnet.com 


APPLICATION SYSTEMS ARCHI- 
TECT Responsible for application 
systems design, baiancing opti- 
mization of application access with 
resource use factors. Design and 
construct application systems and 
develop requirements and design 
specification for new and existing 
applications. Create, revise and 
maintain document requirements 
for data, workflow, logical process- 
es, hardware and operating sys- 
tem environment, interfaces with 
other systems, internal and exter- 
nal checks and controls, and out- 
puts. Require: Bachelor's degree in 
Computer Science, Engineering, or 
a closely related field, with 4 years 
of experience in the jot offered or 
as a Software Programmer/Consul- 
tant, Experience must include 2 
years of application systems design 
experience using Visual Basic and 
SQL Servers; Send resume to 
Recruiter - Human Resources 
AgFirst Farm Credit Bank, P.O. Box 
1499, Columbia, SC 29202. (No 
Phone Calis Please) 


Software Engineer wanted at NY 
Office of Empact Solutions to 
design, develop, test and impie- 
ment EyeQ software. Experience 
with Websphere, WSAD, JAVA 
J2EE, JSP, Struts, SLA-standards. 
Serviets, LDAP, CVS, Apache 
Linux/UNIX and Win2000. Must 
have design, analysis, and model- 
ing capabilities of business 
requirements using UML and RUP. 
Capable of interfacing with market- 
ing and customer care groups. 
Data Mining, Statistics, Trend 
Predictive and Inference Analysis 
capabilities. Database knowledge 
DB/2, Oracie, MySQL, or Sybase. 
Object oriented design and pro- 
gramming required. Should have’ 
a Master's Degree in Computer 
Science or Engineering and have 
at least 2 years experience. Send 
to NY Recruiter at careers@ 
empactsolutions.com referencing 
code SSNGG. 


SOFTWARE ENGINEER 


Design, develop and test computer 
software for business and scientif- 
ic applications applying principles 
and techniques of computer sci- 
ence, engineering and mathemati- 
cal analysis. Analyze software re- 
quirements for feasibility of design 
and hardware interface. Develop 
N-Tier applications using expertise 
in Visual Basic 4.0/5.0/6.0, and 
develop Web-based applications 
using expertise in ASP/Visual 
Interdev 6.0/ASP.Nev/VB.NeUXML 
XSL. and DOM, IIS, Web Sphere. 
Oracle Web Server. Require- 
ments: Bachelor's degree in Com- 
puters or Engineering and 5 yrs. 
experience as a software engineer. 
Knowledge of applicable skills. 
Salary: $70K/yr. 40 hrs/wk. Apply: 
Supervisor, Indiana County 
CareerLink, 300 Indian Springs 
Rd., Indiana, PA 15701. Refer to 
Job Order No. WEB 320787 


Database Administrator - SQL 
wanted to oversee efforts associat- 
ed w/ the planning, admin., & oper 
support (24-hr. by 7-day) of 
client/server database mgmt. sys- 
tems (DBMS) & related technolo- 
gies in a multi-vendor, multi-piat- 
form computing environ. Resp 
incl.: installation & maintenance: 
storage planning & utilization moni- 
toring performance/availability 
monitoring, debugging & problem 
resolution; backup/recovery config- 
uration & data integrity monitoring 
data archive design & mgmt 
batch execution scheduling: trans- 
actional integration/ interfacing 
security configuration & monitor- 
ing; programming standards devel- 
opment & quality control; evaiua- 
ition, selection, & integration of 
DBMS tools & technologies. May 
provide assistance for the following 
application development functions: 
Legacy DB migration; DB design 
development & testing; application 
Program installation/upgrade; En- 
terprise-wide storage mgmt. & busi- 
ness continuity planning: DB devel- 
opment & standards training. Must 
have Bach. deg. in Comp. Sci 
M.1.S. of related field & 3 yrs 
exper. in a database program- 
ming/support environ., inci. admin 
on-call support & database admin 
exper. as well as exper. supporting 
client/server applications in a 
MicroSoft NT or UNIX environ 
40/hr/wk. Salary $75,000/yr 
Send 2 resumes to Case# 
200201128, Labor Exchange 
Office, 19 Staniford St. st FI 
Boston, MA 02114 


IT Consultant (Business 
Process Analysis): Perform sys- 
tems requirements analysis 
including considering and evalu- 
ating alternative solutions as 
well as aiding and providing 
functional design pian. Produce 
systems specification and per- 
form systems and component 
engineering. Working with 
clients to conduct testing includ- 
ing integration testing using a 
variety of software engineering 
tools SQL and Object 
Databases. Conduct Business 
Process Analysis of the client's 
business and provide systems: 
maps for the same. Assisting 
clients in project management, 
planning and implementing 
change management programs: 
and post-impiementation evalu- 
ations. Working with clients in 
implementing systems and com- 
ponent test plans development. 
Requirements include a 
Master's degree or equivalent in 
Business Management, an 
Engineering discipline or related 
field. No work experience 
required. Requires 70-75% 
domestic/international _ travel 
Applicants must have unrestrict- 
ed authorization to work in the 
United States. Salary 
$85,000/year. 40 hours/wk 
Respond with two copies of 
resume to Case #200201020, 
Labor Exchange Offfice, 19 
Staniford St., 1st Fl., Boston, MA 
02114. 


SYSTEM SUPPORT SPECIALIST 


Design, develop and test computer 
software for business and scientific 
applications applying principles and 
techniques of computer science 
engineering and mathematical 
analysis. Analyze software require- 
ments for system support and 
administration of IBM RS/6000. 
Sun Solaris, HP-UX, Microsoft 
Windows NT and 2000 using 
expertise in IBM Development 
Tivoli Enterprise Management 
applications, Tivoli Framework. 
Tivoli Distributed Monitoring, Tivoli 
Enterprise Console, Tivoli Netview 
and Tivoli Storage Manager, BMC 
Patrol, Tera Term SSH, use of Perl 
Shell Scripting to automate the 
operations and LAN, WAN, Cisco. 
Nortel based network devices 
Requirements: Bachelor's degree 
in Computer Science and 4 yrs. 
lexperience as a system support 
specialist, software engineer or 
programmer. Salary: $64,240/yr. 
40 hrs/wk. Apply: Manager, Beaver 
Co. Team PA CareerLink, 2103 
Ninth Ave., Beaver Falls, PA 15010- 
3957. Refer to Job Order No. WEB 
320777 
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Additional Opportunities in the Following Areas: 


* Software Development 
* Human Resources 
© Product Training 
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Finance 
* Marketing 


For fastest consideration interested 
candidates should e-mail their resume, 
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The MathWorks, Three Apple Hill Drive, 
Natick, MA 01760-2098. 
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DATABASE ANALYST: Duties 
include: DBA Administration 
support for 15 applications as 
primary and 20 applications as 
secondary DBA for Group, E- 
business Investments 
individual and CIS business 
units. Under general supervi- 
sion, DBA is responsible for 
Physical database design and 
optimization from logical models 
utilizing modeling tools 
Implement and maintain data- 
bases and database utilities on 
MS SQL server and Sybase 
SQL Anywhere. Administer 
security within DBMS facilities. 
Definition and maintenance of 
replication and transformation 
products (DTS) and facilities 
Perform database change 
requests and assist application 
community with application tun- 
Install, configure and 
S software and 
and apply service 
packs. Maintain daily monitoring 
scripts and alerts. Min Reqts. 
BS/BA (foreign equivalent 
accepted) in CS, IT, EE or relat- 
ed AND 4 years of experience in 
the job offered OR 4 years expe- 
rience with database design and 
administration. PLUS, must 
have demonstrated knowledge 
and work experience with: (1) 
Logicai and physical data mod- 
eling, warehousing, design and 
installation of large distributed 
environment database systems. 
(2) MS-SQL Server, Oracle 
UDB & SyBase environments: 
and (3) T-SQL, Perl Script, 
Power Design and ASP tech- 
nologies. Basic p2v range is 
$69,100-$75,500 per year FT 
and standard company benefits. 
EEO. Submit 2 resumes and 
respond to Case No. 2001 
16632, Labor Exchange Office, 
19 Staniford Street, 1st Floor, 
Boston, MA 02114 
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Consultant Software Engineer 
Developer to serve as a lead tech- 
nical consultant responsible for 
analysis, design development 
and implementation of business 
applications for both internet and 
intranet. Will work with team of 
developers using Java and C/C++ 
under Windows and UNIX to devel- 
op, test, and debug client/server 
applications in development envi- 
ronments including BM Web- 
sphere, IBM VisualAge and MS 
Visual Studio. Will perform ail 
graphical user interface (GUI) and 
database development for various 
systems. Will establish and monitor 
Project plans, working directly with 
user community for project defini- 
tion. Will provide technical evalua- 
tion estimates on initiatives and 
maintain user-external group rela- 
tionships. Requires Bachelor's 
degree in Computer Science 
Engineering, Mathematics, or Phy- 
sics plus four (4) years experience 
in job offered OR four (4) years 
experience developing client serv- 
er applications. OR. in the alterna- 
tive, Master's degree in Comput- 
er Science, Engineering, Mathe- 
matics, or Physics plus two (2) 
years experience in job offered OR 
two (2) years experience develop- 
ing client server applications 
Candidate must also possess 
demonstrated expertise performing 
‘object-oriented analysis and design 
in architecting large scale applica- 
tions; demonstrated expertise de- 
veloping GU! and Engines for large 
scale applications using JAVA; and 
demonstrated expertise in data- 
base installation, stored proce- 
dures and performance tuning in 
ORACLE or SYBASE. Salary 
$92,200/yr, M-F, SAM-SPM. Send 2 
resumes to Case #200116231 
Labor Exchange Office. 19 
Staniford St. 1st fi., Boston, MA 
02114. EOE. Applicants must be 
eligible to accept full-time employ- 
ment in U.S. 
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The United Nations Relief and Works Agency for Palestine 
Refugees in the Near East (UNRWA) is seeking a qualified 


professional for the position o/ 


Project Manager 


(Palestine Refugees Records Project "PRRP"), 


HQ/Amman 


As a Senior Professional within the department of Operational 
Technical Services, the Project Manager will be expected to 


* initiate, manage and oversee implementation of the PRRP 
* assess essential computing requirements for users in the Relief 


& Social Services Department 


* analyze, gather the required information and develop a high- 


level user requirements document 


* prepare a proposal, lead, negotiate its process of evaluation 
review and monitor the development. 
* arrange, supervise the development and make 


recommendations 


Senior level experience in managing large application development 
projects and thorough knowledge and exposure to modern tools 
experience with project management tools and techniques and ability 
in collecting user requirements through variety of techniques, are 


essential 


Further information about this out- 
standing opportunity and how to 


apply are 


available 


from 


www.un.org/unrwa/emp.html. 


Applications close 4 May 2003. 


Business Objects has an opening 
for the position of Senior Consult- 
ant to be based out of our Atlanta, 
GA office. Responsible for consult: 
ing on the implementation and 
management of Business Objects 
Software Suite within a particular 
clients organization. Perform SQL 
database programming, program- 
mability object oriented software 
design, .database management 
(DBA), cent relations, and manage 
project deliverables. Utilize Visual 
Basic, Active Server Pages (ASP) 
Java, and JavaServer Pages 
(JSP). Utilize expertise in Web- 
intelligence with SDK on both the 
WIBEAN and WICOM models 
Design and deploy intranet and 
Extranet Architecture for Webintel- 
ligence. Configure SDK using appli- 
cation and web servers. Design 
and deploy Business Objects 
Security for single sign on. Re- 
quires Bachelor's or equivalent and 
4 years’ of relevant experience 
Background in all of the following 
also required: Webintelligence with 
SDK for both WIBEAN & WICOM 
models with actual customization 
and deployment in NT & UNIX 
design/deployment of Intranet & 
Extranet Architecture (for Webintel- 
ligence) involving CORBA deploy- 
ment, TCP-mode deployment, and 
deployment across the firewall 
Configuration of SDK using appli- 
cation servers (iPlanet, Web- 
sphere, Tomcat) and webservers 
design/deployment of Business 
Objects Security using Supervisor 
Module for single sign on. May 
require travel. To apply for a posi- 
tion visit our website at www.busi 
nessobjects.com/careers or for- 
ward your resume (ref CW0403) to 
Business Objects Americas, Attn 
Staffing, 3030 Orchard Pkwy, San 
Jose, CA 95134. EOE 


SOFTWARE ENGINEER 


Software engineer to design, devel- 
op and test computer programs for 
business applications; analyze soft- 
ware requirements to determine 
feasibility of design; direct software 
system testing procedures using 
expertise in Plumtree, Vantive 
NET and Oracle. Requirements 
Bachelor's Degree or equivalent in 
Computer Science or related field 
and two years experience as a soft- 
ware engineer or computer pro- 
grammer, knowledge of Plumtree. 
Vantive, NET and Oracle. Salary 
$66,000/year. Working Conditions: 
8:00 AM. to 5:00 P.M, 40 
hours/week, involves extensive 
travel and frequent relocation 
Apply: Manager, Butler County 
CareerLink, Pullman Commerce 
Center, 112 Hollywood Drive, Suite 
101, Butler, PA 16001, Job No 
WEB320214 


Full-time Industrial Engineer 
Responsible for optimizing pro- 
ductivity and improving service 
while identifying lower cost 
opportunities by evaluating dif- 
ferent strategies. Optimizing the 
central warehouse and network 
as well as determining the short 
and long term ramifications. 
Assist in economic decision 
analysis. Analyze processes 
within to determine ways to 
streamline operations. Analyze 
and model new technology that 
may be used as well as their 
cost benefit. Assist with the 
development and the impiemen- 
tation of the applications that will 
lead to cost effective solutions 
Works with universities to jointly 
develop technologies that will 
benefit SPL Work — with 
Operation Research both in 
computational and algorithmic 
skills, dynamic programming, 
programming, simulation and 
Statistical analysis. Arena 
AutoSched Gams Lindo, 
AMPL. Matlab. These duties are 
performed under the direct 
supervision of immediate super- 
visor. Must have Bachelors 
Degree in Industrial Engineering 
or related field. Employer will 
accept Masters in lieu of 
Bachelors Degree. Educational 
background must have included 
the above-referenced skills 
Salary Competitive. Employer 
will not sponsor for visas. Send 
resume to: Robbin Lee, United 
Parcel Service, 12380 Morris 
Road, Alpharetta, GA 30005. 


System Specialist !| - Resp for dev- 
elopment of Internet functionality 
for projects w/in Broadvision frame- 
work. Resp incl: lead or participate 
in analysis, sys design, & sys archi- 
tecture; program in Java, Java- 
Script, C/C++, & Oracle; identify 
areas of risk & present mitigation 
plans; demonstrate expert under- 
standing of sys design & develop- 
ment, technology support, & data 
processing standards; assess im- 
pact of technology support orgs on 
system's technical direction; pro- 
vide consultative services for tech- 
nical business opportunities; train 
business units on new or changed 
products, processes, & services. 
Min. req's: Bachelor's in Computer! 


job offered, or 2 yrs exp as Sys- 
tems Analyst or Software Engineer. 
Must have unrestricted authoriza- 
tion to work in U.S. M-F, 9AM-5PM, 
40+ hrs/wk. Salary: $68,400- 
$80,000/yr. An EOE. Send 2 copies 
of resume to Case No. 200116584, 
Labor Exchange Office, 19 Stan- 
iford St., 18 FI, Boston, MA 02114 
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Software Engineer consulting 
positions - Develop, create, 
modify computer systems/appli- 
cations software and specialized 
utility programs; analyze, design 
databases, evaluate user needs, 
develop software solutions. 
Bachelor's degree or foreign or 
functional equivalent in one of 
several limited fieids: CS/CA, 
Eng., Chem., Math, Physics, or 
scientific or business related 
field. Must have one year of 
experience using a combination 
of the following: RS/6000, SUN 
SPARC, SUN ULTRA, SUN 
ENTERPRISE, HP 9000, AIX 
LOGICAL VOLUME MANAG 
ER, IBM RAID, SSA, TCP/IP 
SUN CLUSTER, HIGH AVAIL- 
ABILITY, SUN RAID, VERITAS 
VOLUME MANAGER, NIS, 
NFS, MC SERVICE 
HP OPENVIEW, 
FREEBSD. GNU 
Travel and frequent relocation 
required. $65K/yr 40hrs/wk 
EEO/AAP/M/F/V/H Please 
Submit Resumes to: Fayette 
County Team PA CareerLink 
ATTN: JS Supervisor, 32 lowa 
Street, Uniontown, PA 15401- 
3513, Job Order No: WEB 
319547 


Software Engineer consulting 
positions Develop, create 
modify computer systems/appli- 
cations software and specialized 
utility programs; analyze, design 
databases, evaluate user needs, 
develop software solutions 
Bachelor's degree or foreign or 
functional equivalent in one of 
several limited fields: CS/CA 
Eng., Chem., Math, Physics, or 
scientific or business related 
field. Must have one year of 
experience using a combination 
of the following: WINDOWS 
95/98/00/NT, UNIX, ORACLE 
VISUAL C++, C, C++, POWER- 
BUILDER, MFC, CRYSTAL 
REPORTS, VISUAL BASIC 
COM/DCOM, CORBA. Travel 
and frequent relocation required 
$65K/yr 40hrs/wk EEO/AAP/ 
M/F/V/H Please Submit 
Resumes to: Site Administrator, 
Greene County Team PA 
CareerLink, 4 West High Street 
Waynesburg, PA 15370-1324 
Job Order No: WEB 319871 


Software Engineer consulting 
positions Develop, create 
modify computer systems/appli- 
cations software and specialized 
utility programs; analyze, design 
databases, evaluate user needs, 
develop software solutions 
Bachelor's degree or foreign or 
functional equivalent in one of 
several limited fields: CS/CA, 
Eng., Chem., Math, Physics, or 
scientific or business related 
field. Must have one year of 
experience using one of the fol- 
lowing: PeopleSoft, SAP, BAAN, 
Oracle Applications/Financials/ 
Manufacturing/HR. Travel and 
frequent relocation required 
$65K/yr 40hrs/wk EEO/AAP/ 
M/F/V/H Please Submit Resu- 
mes to: Job Center/CareerLink 
Supervisor, Indiana County 
CareerLink, 300 Indian Springs 
Road, Indiana, PA 15701, Job 
Order No: WEB 319919 


GRAPHIC DESIGNER 


WC! Communities, Florida's 
premier developer of luxury; 
homes, is seeking an experi- 
enced Graphic Designer for 
our Bonita Springs location 


Requires a minimum of 2 
years related experience 
and a Bachelor's degree in 
Advertising/Graphic Design. 


Please fax resume to (239) 
498-8399 and please refer- 
ence Job Code MKF-CM. 
Web: wcicommunities.com. 
EOE/Drug Free Workplace. 


SENIOR 
PROGRAMMERS 


needed to program, 
implement and test software 
applications using VC++, 
Oracle and Informix on 
UNIX platforms with 
automated test tools. 
Bachelors required in Math, 
Computers, Engineering or 
any other related field of 
Study, plus 2 yrs of 
experience. Must have proof 
of legal authority to work in 
the U.S 


Salary: $70,000.00/year for 
a 40 hour work week 


Interested applicants contact 
the Site Administrator, 
Greene County Team PA 
Career Link, 4 West High 
Street, Waynesburg, PA 
15370-1324. Refer to Job 
Order #WEB320207. Ad 
paid by An Equal 
Opportunity Employer. 











Software Engineer consulting 
positions Develop, create. 
modify computer systems/appli- 
cations software and specialized 
utility programs; analyze, design 
databases, evaluate user needs. 
develop software solutions 
Bachelor's degree or foreign 
equivalent or equivalent combi- 
nation of education and experi- 
ence as a computer profession- 
al in lieu of Bachelor's. Degree 
must be in one of several limited 
fields: CS/CA, Eng., Chem 
Math, Physics, or scientific or 
business related field. Must 
have one year of experience 
using one of the following 
Informix Oracle FoxPro 
Sybase, SQL Server, Progress. 
Travel and frequent relocation 
required. $65K/yr 40hrs/wk 
EEO/AAP/M/F/V/H Please 
Submit Resumes to 
McKeesport CareerLink, ATTN 
CL Program Supervisor, 345) 
Fifth Avenue, McKeesport, PA 
15132-2600, Job Order No 
WEB 319899 


SOFTWARE APPLICATION 
ENGINEER 


Develop software for the Famine 
Early Warning and Environmental 
Monitoring project. Develop and 
maintain websites for Afghanistan. 
Haiti and Central American regions. 
Use a combination of ESRis GIS 
technologies for developing web- 
mapping applications relating to 
Stream Flow modeling in Southern 
Africa, Greater Horn of Africa and 
Mozambique regions. Knowledge 
of web technologies ActiveX 
Phpiot, 11S Security, 508 Web 
Accessability Standards. Know- 
ledge of GIS technologies ArciMS, 
ArcGIS, ArcSDE, MapObjects. 40 
hours per week. $51,210.00/year 
8:00 a.m. to 5:00 p.m. Bachelor's: 
degree or equivalent in Computer 
Science/Engineering or related 
field. Must have proof of legal 
authority to work in the United 
States. Send your resume to: South 
Dakota One-Stop Career Center 
811 E. 10th Street, Sioux Falls, SD 
57103-16500, #605-367-5300(T). 
#605-367-5308(F). Please refer to 
Job Order #SD1222908. 


Software Engineer — FT 
Design, build, customize & 
monitor software systems. 
Related BA/BS Deg req. 
(or functional US equiva- 
lent) + 2 yrs min exp in job 
offered or IT industry. 
Competitive Salary. Multi- 
ple positions for roving 
worksites throughout US. 
Mail resume to ECS, HR 
Director 2875 NE 191 St 
#701 Aventura, FL 33180 


Computerworld + April 21, 2003 


SENIOR PROGRAMMER/ANA- 
LYST to lead a team in the 
analysis, design, development 
and configuration of large 
Mainframe/UNIX/Windows 
based application software for 
the retail and manufacturing 
industry using COBOL, CICS, 
JCL, CA-intertest, Expeditor, 
Ros-coe, TSO, Endevor, Visual 
Basic, Developer 2000, PL/SQL 
Seer* HPS Rules, DB2, Oracle, 
CA-Data-com, SQL*Loader 
DB2-Platinum tools, DB2- 
TMON, File-Aid, Control -M 
scheduler, MS Source Safe and 
MS Project. Require: B.S 
degree in Computer Science 
/Engineering, or a closely relat- 
ed scientific field with two years: 
of experience in the job offered 
or as a Systems Analyst. Comp- 
etitive salary offered. Apply by 
resume to: Sophie Mookerjie, 
President, Software Paradigms 
International, Inc., 3901 Rosweli 
Road, Suite 134, Marietta, GA 
30062; Attn: Job KS 


Software Engineer consulting 
positions Develop, create, 
modify computer systems/appli- 
cations software and specialized 
utility programs; analyze, design 
databases, evaluate user needs 
develop software solutions 
Bachelor's degree or foreign or 
functional equivalent in one of! 
several limited fields: CS/CA, 
Eng., Chem., Math, Physics, or 
scientific or business related 
field. Must have one year of 
experience using a combination 
of the following: ASP, HTML, 
CGI, PERL, MTS, IIS, JAVA, 
JAVASCRIPT, JAVABEANS, 
COLDFUSION, BROADVISION, 
ATG DYNAMO, NET DYNAM- 
ICS, WEBSPHERE, FRONT 
PAGE. Travel and frequent relo- 
cation required $65K/yr 
40hrs/wk EEO/AAP/M/F/V/H 
Please Submit Resumes to 
Manager, Armstrong County 
Team PA CareerLink, 1270 
North Water Street, PO Box 759, 
Kittanning, PA 16201-0759, Job 
Order No: WEB 319910 


Software Engineer consulting 
Positions - Develop, create, 
modify computer systems/appli- 
cations software and specialized 
utility programs; analyze, design 
databases, evaluate user needs, 
develop software solutions 
Bachelor's degree or foreign 
equivalent or equivalent combi- 
nation of education and experi- 
ence as a computer profession- 
al in lieu of Bachelor's. Degree 
must be in one of several limited 
fields: CS/CA, Eng., Chem., 
Math, Physics, or scientific or 
business relaied field. Must 
have one year of experience 
using one of the following 
PeopleSoft, SAP, BAAN, Oracle 
Applications/Financials/Manufac: 
turing/HR. Travel and frequent 
relocation required. $65K/yr 
40hrs/wk EEO/AAP/M/F/V/H 
Please Submit Resumes to 
Manager Butler County 
CareerLink, Pullman Commerce 
Center, 112 Hollywood Drive, 
Suite 101, Butler, PA 16001- 
5699, Job Order No: WEB 
319904 


Programmer Analysts - 
analyze, design, develop- 
ment of software/applica- 
tions in database, web/ 
internet, client/server ap- 
plications. Min Edu-BS in 
Comp.Sc./Engg or equi, 
Min Exp-2 yrs. Job may 
involve working at various 
locations throughout the 
US. Please send resumes 
to Attn: RR, 1022, East 
Divide Ave Suite D, City of 
Bismarck, ND 58501. 
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Software Engineer consulting 
positions - Develop, create, 
modify computer systems/appli- 
cations software and specialized 
utility programs; analyze, design 
databases, evaluate user needs, 
develop software solutions 
Bachelor's degree or foreign or 
functional equivalent in one of 
several limited fields: CS/CA, 
Eng., Chem., Math, Physics, or 
scientific or business related 
field. Must have one year of 
experience using one of the fol- 
lowing Informix, Oracle, 
FoxPro, Sybase, SQL Server, 
Progress. Travel and frequent 
telocation required. $65K/yr 
40hrs/wk EEO/AAP/M/F/V/H 
Please Submit Resumes to 
Fayette County Team PA 
CareerLink, ATTN JS 
Supervisor, 32 lowa Street, 
Uniontown, PA 15401-3513, Job 
Order No: WEB 319936 


Systems Analyst - Must have B.S 
or equivalent in MIS, Computer 
Science or Related. Must have 3 
yrs. of experience in the job offered 
or 3 yrs. of experience as a Soft- 
ware Consultant. To participate as 
part of a team on Business or Man- 
ufacturing Systems in the analysis, 
development and implementation 
of projects by using Visual Basic. 
C++, ASP, MSMQ and MTS, IIS 
HTML, XHTML, Visual Interdev, 
SQL Server, Crystal Reports and 
object oriented analysis. Provide on 
a regular schedule, 24 hour, 7-day 
on-call problem resolution support 
for Business and Manufacturing 
Systems. Investigate and resolve 
problems in business system. Train 
employees on the use of new sys- 
tem functionality. To work 40 hours 
per week from 8am-5pm. Qualified 
applicants must send resumes to 
HR, Russell Corporation, Systems 
Analyst Position, 3330 Cumberland 

Suite 800, Atlanta, GA 


Software Engineer consulting 
positions - Develop, create, 
modify computer systems/appli- 
cations software and specialized 
utility programs; analyze, design 
databases, evaluate user needs, 
develop software solutions. 
Bachelor's degree or foreign or 
functional equivalent in one of 
several limited fields: CS/CA, 
Eng., Chem., Math, Physics, or 
scientific or business related 
field. Must have one year of 
experience using Siebel CRM 
Travel and frequent relocation 
required $65K/yr 40hrs/wk 
EEO/AAP/M/F/V/H Please 
Submit Resumes to: Manager, 
Beaver County Team PA 
CareerLink, 2103 Ninth Avenue, 
Beaver Falls, PA 15010-3957, 
Job Order No: WEB 319885 


SOFTWARE ENGINEER 


Software engineer to design, 
develop and test computer pro- 
grams for business applications 
analyze software requirements to 
determine feasibility of design; 
direct software system testing pro- 
cedures using expertise in Java, 
JSP, EJB, Oracle, UML & XML 
Requirements: Bachelor's Degree’ 
or equivalent in Computer Science 
or related field and two years 
experience as a software engineer 
or computer programmer, knowl- 
edge of Java, JSP, EJB, Oracle. 
UML & XML. Salary: $66,000/year. 
Working Conditions: 8:00 A.M. to 
5:00 P.M., 40 hours/week, involves 
extensive travel and frequent relo- 
cation. Apply: Manager, Armstrong 
County Team PA CareerLink, 1270 
North Water Street, PO Box 759, 
Kittanning, PA 16201, Job No. 
WEB320221 
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testing Windows Server 2003 
for a few months and has been 
satisfied with its new features 
and stability. Plans call for a 
near-immediate migration of 
domain controllers and Active 
Directory. Others systems will 
follow within six months, as 
PBS moves off Windows 2000 
and Sun Microsystems Inc.’s 
Solaris operating system, 
Mendes said. 

But PBS hardly represents 
the norm, according to Gart- 
ner Inc. Analyst Tom Bittman 
said he expects only about 5% 
of Windows 2000 users to 
move by year’s end, with an- 
other 15% to follow by the end 
of 2004. 

Bittman also predicted that 
companies still using Win- 
dows NT 4.0 won’t rush to up- 
grade either, despite a 2004 
end-of-support deadline. 


Continued from page 1 
Windows 


Life Insurance Co. in London, 
Ontario. “We will also skip up- 
grades if there’s no immediate 
need or benefit.” 

Many IT managers, how- 
ever, expressed keen interest 
in some of the new features in 
Windows Server 2003, partic- 
ularly the improvements to 
Active Directory (see box), 
and some said they will start 
migrating this year. 

James Hudson, director of 
IT worldwide at J. Walter 
Thompson Co. in New York, 
said he expects the advertising 
agency to move to the new op- 
erating system in three to six 
months because of the added 
stability of Active Directory. 
The company is currently run- 


Server 2003 purely in techni- 
cal terms.” 

Jim Hebert, general manag- 
er of Windows enterprise 
servers at Microsoft, said the 
} company is well aware that IT 
spending is flat and probably 
will be next year as well. So 
Microsoft will focus on trying 
to help customers understand 
the benefits they might see 
from an upgrade, he said. 

One popular theme is server 
consolidation, a benefit that 
Steve Sommer, CIO at Hughes 
Hubbard & Reed LLP, said he 
hopes to achieve with an up- 
grade that may start as early as 
the fourth quarter. The New 
York-based law firm now has a | 
mix of Windows NT and 2000. 

Other migration drivers for 
Hughes Hubbard include the 
impending end of support for 
NT and the company’s huge li- 


make “it a shame if you don’t 
do some upgrading,” since the 
| new software is already paid 

| for, Sommer said. 

| Even so, some companies 
may resist making a quick 

| move because of the labor 
costs and disruption associat- 
ed with a server migration. 
Others simply don’t like to test 
Microsoft software until the 
bugs get worked out in the 
first service pack. 

Raymond Leitz, director of 
technical services at Auto- 
Nation Inc. in Fort Lauderdale, 
Fla., said his company prefers a 
six- to nine-month “cooling pe- 
riod” before considering new 
Microsoft server software. D 


Microsoft drops “.Net” from its server 
product line and rebrands it “Windows 


Active Directory 
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said, adding that he doesn’t 
expect more than 25% to 33% 
of the existing NT base to mi- 
grate to Windows Server 2003 
by the end of next year. 

“Nobody is making any kind 
of IT purchases unless they 
have a good business case,” 
said Dwight Davis, an analyst 
at Summit Strategies Inc. in 


ning a mix of Windows NT 
and 2000 and Novell Inc.’s 
NetWare. 

Hudson said the efficiency 
designed into the replication 
topology of Active Directory 
will be important, since his 
company has a large global 
Active Directory deployment 
distributed across several of- 
fices. “Having greater control 
in how we manage replica- 
tion across WAN links with 
bandwidth constraints will 
allow us to efficiently sched- 
ule replication intervals,” 
Hudson said. 


Early Adopter 
Andre Mendes, CIO at Public 
Broadcasting Service (PBS) in 
Alexandria, Va., said his com- 
pany’s migration within the 
next six months will be driven 
by new Active Directory and 
Exchange 2003 features, im- 
proved security and the shad- 
ow-copy feature for creating 
backup copies of files or fold- 
ers to prevent inadvertent loss 
of data. 

Mendes said PBS has been 


NEXT WEEK 


Four early adopters discuss their exper- 
iences with Windows Server 2003. See the 
Technology Section in next week's issue. 








Those companies tend to be 
conservative by nature, he 





Boston. “People are not going 
to be looking at Windows 


Also Slated for Launch 


The much-ballyhooed launch of 
Windows Server 2003 this week 
is overshadowing the simultane- 
ous release of a new version of 
Microsoft's Visual Studio .Net 
development environment. 

Even Microsoft acknowledged 
that the tool is largely ar: incre- 
mental upgrade to Visual Stucio 
.Net 2002. What's more impor- 
tant is the delivery of the devel- 
opment environment in tandem 
with the new server operating 
system, which has the Net 
Framework built into it for the 
first time, said David Lazar, Mi- 
crosoft's director of Visual Studio 
{roduct management. 

“We think it's absolutely es- 
sential,” said Jerry Hale, CIO at 
Eastman Chemical Co. in Kings- 
port, Tenn. 

in the past, developers had to 
oe 





2003 will feature the new Version 
11 of the. Net Framework, which 
consists of the Common Langu- 
age Runtime and a unified set of 
class libraries, including ASP.Net 
for Web applications and Web 
services, and ActiveX Data Ob- 
jects (ADO) for data access. 
“Having seen it run, it’s going 
to be a lot faster, and it has richer 
integration with the operating 
system,” said Kevin Rice, an en- 
terprise architect at Allstate Fi- 
nancial, a business unit of The 
Alistate Corp. in Northbrook, Ill. 
Also setting the new tool 
apart from its predecessor for 
Allstate will be the ADO.Net data 
access capabilities for Oracle 
databases. The first version of 
Visual Studio .Net had those 


components only for Microsoft's 


SQL Server, Ricesaid. 
Rice is also axxious to use the 





censing and support agree- 
ments with Microsoft, which 


Other new features Allstate ex- 
pects to use include the Net Com- 
pact Framework for building appli- 
cations for wireless devices, en- 
hanced Web services support and 
code obfuscation, which will help 
prevent outsiders from reverse- 
engineering code, Rice said. 

Hale said the biggest plus 
for Eastman Chemical will be the 
improved migration tools to assist 
his company's move from Visual 
Basic (VB) 6.0, since those tools 
weren't very helpful in Visual Stu- 


NEW FEATURES 


» Net Framework Version 1.1 


_\ Net Compact Framework for 
handheld devices 


~ Enhanced upgrade wizard 


_ Managed data provider for 
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dio Net 2002. Hale said Eastman 
selected the Net development 
platform for its next-generation 
service-oriented architecture. 

But plenty of corporate devel- 
opers said they either haven't 
moved or are just starting to shift 
to Visual Studio Net 2002, which 
Microsoft released 14 months ago. 
The tool was the first to incorpo- 
rate the Net Framework, with its 
thousands of class libraries, and it 
presented a huge change for 
users of prior Microsoft tools. 

“We will take our organization 
there when we get a deveiop- 
ment need for it and the funding 
to have proper training,” said 
Carrie Howard, IT project coordi- 
nator for Washoe County in 
Nevada. She said the county's 
developers know VB 6.0 well. 

John Rymer, an analyst at 
Cambridge, Mass.-based For- 
rester Research Inc., said the 
2003 version should accelerate 
adoption of the .Net Framework 
and ASP.Net, especially for de- 
velopers of portal, Web and 
front-office applications. 

~ Carol Sliwa 
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FRANK HAYES ® FRANKLY SPEAKING 


Secure Your Users 


T THE RSA SECURITY CONFERENCE last week in San 
Francisco, the big news was a new set of cybersecurity 
best practices, a new application vulnerability descrip- 
tion language and a push for Web services security, 
along with the usual collection of new IT security 
products (see story, page 8). Considering what a messy, continuously 
changing security picture we face, it’s all worth digging through 
when you get the chance. Piling more security technology onto your 
networks and servers and desktop PCs is usually a useful thing. 
But while you’re upgrading your security technology, don’t forget 
to upgrade security in your users, too. 


Not for your users. In them. 


Look, you’ve got firewalls and virus filters 
and intrusion-detection systems. You scan logs 
and tune settings. You go hunting on a regular 
basis for unauthorized wireless gateways and 
off-the-network modems. You've built a securi- 
ty fortress, and as long as your users are inside 
that fortress, they’re pretty safe. 

But they won’t stay inside that fortress. In- 
expensive technology lets office workers take 
the office with them wherever they go — or at 
least it seems that way. Maybe it makes them 
more productive, but it also exposes all that 
office activity to the world outside the protec- 
tions of their real office. 

Cheap wireless access points make home 
networking easy. But they can also expose 
access to your networks and data if an office 
worker connects from home while still hooked 
up to his wireless network. 

Cell phones make it easy for outsiders to 
eavesdrop on business conversations. Laptops 
with big, clear screens make it easy for people 
even a few seats away to read confidential doc- 
uments. An enterprising snoop can 
even copy hundreds of megabytes 
of information from a laptop with a 
CD burner left running on an air- 
plane seat while its owner waits in 
line for the lavatory. 

Laptops are thief bait in airports, 
parked cars and even overhead bins 
in airplanes, and they’re typically 
stuffed with confidential business 
information. But so are handheld 
computers, which can easily hold 
documents, spreadsheets and data- 
bases these days — and are much 
easier to steal than laptops. 





And that’s just the tip of the iceberg. There 
are endless ways users can compromise the 
security of business information once they’re 
outside the office, and there’s not much you 
can do about most of them. They’re outside 
your security perimeter — beyond your reach. 

Yes, you can add more security technology. 
You can try to chase down and block off every 
security hole in each user’s portable office. 

But none of that will be as effective as im- 
proving the security in the user. 

Because in the end, security is a set of disci- 
plines practiced by users, not just a set of tech- 
nologies implemented by IT. Security aware- 
ness, good habits and common sense on the 
part of users won't replace firewalls and intru- 
sion detection. But the technology alone won't 
be much use without security-smart users. 

So, what can you do to upgrade your users’ 
security? These days, you don’t have the bud- 
get to send them to security classes. But you 
can send them reminders to be security con- 
scious. Point out specific risks of wireless hubs, 

laptops, handhelds and other tech- 
nologies outside the office. Make 
specific suggestions for avoiding 
those risks. And offer help if users 
have questions or problems. 

And when they do call for help, 
don’t just tell them, “No, don’t do 
that!” Work with them. Look for 
options and alternatives. Find so- 
lutions that you and they can live 
— and work — with. 

Build real security into your 
users. Then you'll find out just 
how useful all that security tech- 
nology can be. B 
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